General
- Target 2026-10-21_9c1ceb430f7169e4aee7fb49eb8307a7_amadey_elex_hijackloader_remcos_smoke-loader
- Size 2.7MB
- Sample261022-s9adfa11ds
- SHA256 8edfac34862591c3db8b35d7d0fb743ab0b3ed77d1514322b1bd618916cb5221
- MD5 9c1ceb430f7169e4aee7fb49eb8307a7
- SHA1 5136f912df27918f045113f9414b4a5732c81cb8
- SHA512 6479f9091b8af7df159eed549fc5992c91e61c2cd6507a042108024397b5c335b8c220565b4b689897e0e889ba619349d059523316ec2f0972cd479277c95425
- SSDEEP 24576:AENJKEt6dq8hXj8R2vxWl0KHqe5GqR6FokaCvz44sLy0aZJQ5Te6LSwENdrUg+pz:AENwzIR2UB9IqR6Foevku04YL2rUrp5
- TLSH T12AD58E01BB1040B9F9E682B51ABFA1A8555C7DB04758B0CFA1D877FA1E357E12E32387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_9c1ceb430f7169e4aee7fb49eb8307a7_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_9c1ceb430f7169e4aee7fb49eb8307a7_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_9c1ceb430f7169e4aee7fb49eb8307a7_amadey_elex_hijackloader_remcos_smoke-loader
- Size 2.7MB
- SHA256 8edfac34862591c3db8b35d7d0fb743ab0b3ed77d1514322b1bd618916cb5221
- MD5 9c1ceb430f7169e4aee7fb49eb8307a7
- SHA1 5136f912df27918f045113f9414b4a5732c81cb8
- SHA512 6479f9091b8af7df159eed549fc5992c91e61c2cd6507a042108024397b5c335b8c220565b4b689897e0e889ba619349d059523316ec2f0972cd479277c95425
- SSDEEP 24576:AENJKEt6dq8hXj8R2vxWl0KHqe5GqR6FokaCvz44sLy0aZJQ5Te6LSwENdrUg+pz:AENwzIR2UB9IqR6Foevku04YL2rUrp5
- TLSH T12AD58E01BB1040B9F9E682B51ABFA1A8555C7DB04758B0CFA1D877FA1E357E12E32387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory