General
- Target 2026-10-21_82d06fec7489d3ecced585e6c3a97e84_amadey_elex_hijackloader_remcos_smoke-loader
- Size 2.6MB
- Sample261022-x4czlabd38
- SHA256 94f3c518fbdae25f2700445dd3255aba1f6c74912e5208a05a80bb30e3d3c4b5
- MD5 82d06fec7489d3ecced585e6c3a97e84
- SHA1 d3f226d1eab6bf8672a4cf92bda106390fa23c28
- SHA512 7b80b5763a49718252a194ca2b80707eeb8085b522f9250e92b82e1a2f4c9edff663c5c2419cf926b3e2ff8775fde916326d71b98c6125cf07185c5dfce47a24
- SSDEEP 49152:JENwzIR257BBIqR6FoRvku04YLxBWIEghFx6cipeapel:JgwkQ7HIqMeIWIpFfvl
- TLSH T11EC57D11F7408028F9E752F55AAEE17994297CF0479860CB61D93BFE1A356E02E3734B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_82d06fec7489d3ecced585e6c3a97e84_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_82d06fec7489d3ecced585e6c3a97e84_amadey_elex_hijackloader_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_82d06fec7489d3ecced585e6c3a97e84_amadey_elex_hijackloader_remcos_smoke-loader
- Size 2.6MB
- SHA256 94f3c518fbdae25f2700445dd3255aba1f6c74912e5208a05a80bb30e3d3c4b5
- MD5 82d06fec7489d3ecced585e6c3a97e84
- SHA1 d3f226d1eab6bf8672a4cf92bda106390fa23c28
- SHA512 7b80b5763a49718252a194ca2b80707eeb8085b522f9250e92b82e1a2f4c9edff663c5c2419cf926b3e2ff8775fde916326d71b98c6125cf07185c5dfce47a24
- SSDEEP 49152:JENwzIR257BBIqR6FoRvku04YLxBWIEghFx6cipeapel:JgwkQ7HIqMeIWIpFfvl
- TLSH T11EC57D11F7408028F9E752F55AAEE17994297CF0479860CB61D93BFE1A356E02E3734B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory