General
- Target 2026-10-21_9b6bd532d9fc97767a1799abf949f3be_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- Sample261022-tchh8adv5z
- SHA256 2c5f6d073a01a0d134f864ea29c9143af35d46a2e11a51809cd38bc9385c9d09
- MD5 9b6bd532d9fc97767a1799abf949f3be
- SHA1 b805bc02338574b507c6f2e09c0464fbe125ba38
- SHA512 2fcc2a5c60571c4dba4c30ec3b5af6d240010fc895f6f57bba90bd6e6efba7b56e6ba9cdd89561b8bfd16b0575a937e8799123988727d05bed4791211f9ec061
- SSDEEP 24576:hENJKEt6dq8hXj8R2vxW870KHQe5GqR6FokG81Cvz44sLy0aZJQ5Te6LIoXHt77R:hENwzIR257BzIqR6FoRvku04YLzd77
- TLSH T15BA54A10A7508029FAF612F55ABDE1BC951C7DF08B9860CBA1D577FE46366E02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_9b6bd532d9fc97767a1799abf949f3be_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_9b6bd532d9fc97767a1799abf949f3be_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_9b6bd532d9fc97767a1799abf949f3be_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- SHA256 2c5f6d073a01a0d134f864ea29c9143af35d46a2e11a51809cd38bc9385c9d09
- MD5 9b6bd532d9fc97767a1799abf949f3be
- SHA1 b805bc02338574b507c6f2e09c0464fbe125ba38
- SHA512 2fcc2a5c60571c4dba4c30ec3b5af6d240010fc895f6f57bba90bd6e6efba7b56e6ba9cdd89561b8bfd16b0575a937e8799123988727d05bed4791211f9ec061
- SSDEEP 24576:hENJKEt6dq8hXj8R2vxW870KHQe5GqR6FokG81Cvz44sLy0aZJQ5Te6LIoXHt77R:hENwzIR257BzIqR6FoRvku04YLzd77
- TLSH T15BA54A10A7508029FAF612F55ABDE1BC951C7DF08B9860CBA1D577FE46366E02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory