General
- Target 2026-10-21_97a1b55516fa7237d4c859f4920ee4d1_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261022-ttylrsag29
- SHA256 f0a7d49f7efeb4a64332185693bcc91f6de61364d3d81e449c2064edd77975a1
- MD5 97a1b55516fa7237d4c859f4920ee4d1
- SHA1 fe49de6d636912e23ea92b1a43a596c7c83596f3
- SHA512 857bf2275135e2cda5e9c86269dae863eac0db817eb9cffbf3970646204f2bce1c7bf7f2493f2b92fe6c7e9f4d2e2114d33e6a52023c0545c8e8190620b3c8f9
- SSDEEP 24576:hENJKEt6dq8hXj8R2vxW870KHIe5GqR6FokG81Cvz44sLy0aZJQ5Te6LTWP:hENwzIR257BLIqR6FoRvku04YL
- TLSH T1E6A54A10AB508029FAE752F55AADE1BC941C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_97a1b55516fa7237d4c859f4920ee4d1_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_97a1b55516fa7237d4c859f4920ee4d1_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_97a1b55516fa7237d4c859f4920ee4d1_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 f0a7d49f7efeb4a64332185693bcc91f6de61364d3d81e449c2064edd77975a1
- MD5 97a1b55516fa7237d4c859f4920ee4d1
- SHA1 fe49de6d636912e23ea92b1a43a596c7c83596f3
- SHA512 857bf2275135e2cda5e9c86269dae863eac0db817eb9cffbf3970646204f2bce1c7bf7f2493f2b92fe6c7e9f4d2e2114d33e6a52023c0545c8e8190620b3c8f9
- SSDEEP 24576:hENJKEt6dq8hXj8R2vxW870KHIe5GqR6FokG81Cvz44sLy0aZJQ5Te6LTWP:hENwzIR257BLIqR6FoRvku04YL
- TLSH T1E6A54A10AB508029FAE752F55AADE1BC941C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory