General
- Target 2026-10-21_981cd1e4ad7caf16d6b69ecb342978f7_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.9MB
- Sample261022-tr5massshv
- SHA256 4ebd6adc6a4ecc73d86a7b8a7d974b89ce1d326ac1949745560cd713e3822c58
- MD5 981cd1e4ad7caf16d6b69ecb342978f7
- SHA1 e259aa52dc912de3168dba139095bd06401ee8eb
- SHA512 b068e4a0ab3598d34b677421063bab755905f8895c3bf5246d5d43d6bd5e961c06ae2a0aac9664b22b23635636c1d9cc270a03f6cdb3a20529ada507f34fc84d
- SSDEEP 49152:HENwzIR257BeIqR6FoRvku04YL61iwtbyS2aK0ww6m/buw7b:HgwkQ7MIqMeZskbh3
- TLSH T1ABE58C10A76080A9FAE791B58AAEE178E5387CB1476451CB61D0F7EA1F372F02D36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_981cd1e4ad7caf16d6b69ecb342978f7_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_981cd1e4ad7caf16d6b69ecb342978f7_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_981cd1e4ad7caf16d6b69ecb342978f7_amadey_cobalt-strike_elex_remcos_smoke-loader_vidar
- Size 2.9MB
- SHA256 4ebd6adc6a4ecc73d86a7b8a7d974b89ce1d326ac1949745560cd713e3822c58
- MD5 981cd1e4ad7caf16d6b69ecb342978f7
- SHA1 e259aa52dc912de3168dba139095bd06401ee8eb
- SHA512 b068e4a0ab3598d34b677421063bab755905f8895c3bf5246d5d43d6bd5e961c06ae2a0aac9664b22b23635636c1d9cc270a03f6cdb3a20529ada507f34fc84d
- SSDEEP 49152:HENwzIR257BeIqR6FoRvku04YL61iwtbyS2aK0ww6m/buw7b:HgwkQ7MIqMeZskbh3
- TLSH T1ABE58C10A76080A9FAE791B58AAEE178E5387CB1476451CB61D0F7EA1F372F02D36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory