General
- Target 2026-10-21_920c74c1b3cdc50c33e8ff12b3f16479_amadey_elex_hijackloader_remcos_smoke-loader
- Size 4.0MB
- Sample261022-vrvmrsswcv
- SHA256 8dd80d9d71617d11c9cb1b5a65a0ff3306dc4ea769ac166cf98b600f53a80830
- MD5 920c74c1b3cdc50c33e8ff12b3f16479
- SHA1 81c4e54ead03ddb3a9e91d1795c3ed562cbfb3b0
- SHA512 f43ea2f94a8fe48e0aec2feb1fe33adff959c994878e66e584e4cb29cd8a985ee5a2c2eaa20efc18348eaa744f6397261602f6720effebc24e1609418458cbb9
- SSDEEP 49152:oENwzIR257BoIqR6FoRvku04YL9ENwzIR257BZIqR6FoRvku04YL8zF:ogwkQ7CIqMeUgwkQ7nIqMefzF
- TLSH T145164A10AB508029FAE752F55AADE1BC951C7DF0879860CBB1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_920c74c1b3cdc50c33e8ff12b3f16479_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_920c74c1b3cdc50c33e8ff12b3f16479_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_920c74c1b3cdc50c33e8ff12b3f16479_amadey_elex_hijackloader_remcos_smoke-loader
- Size 4.0MB
- SHA256 8dd80d9d71617d11c9cb1b5a65a0ff3306dc4ea769ac166cf98b600f53a80830
- MD5 920c74c1b3cdc50c33e8ff12b3f16479
- SHA1 81c4e54ead03ddb3a9e91d1795c3ed562cbfb3b0
- SHA512 f43ea2f94a8fe48e0aec2feb1fe33adff959c994878e66e584e4cb29cd8a985ee5a2c2eaa20efc18348eaa744f6397261602f6720effebc24e1609418458cbb9
- SSDEEP 49152:oENwzIR257BoIqR6FoRvku04YL9ENwzIR257BZIqR6FoRvku04YL8zF:ogwkQ7CIqMeUgwkQ7nIqMefzF
- TLSH T145164A10AB508029FAE752F55AADE1BC951C7DF0879860CBB1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory