General
- Target 2026-10-22_ba0cfbe60daead7f5a7f9c155757969c_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261023-2yrb9aev2x
- SHA256 31ba57e62e2ebadb2ef9697a92b9f27ab4e1fb28f92224281dbe3984fffe3f1f
- MD5 ba0cfbe60daead7f5a7f9c155757969c
- SHA1 92e5e3f4fe935e02a62292d929ca1abfbe838bec
- SHA512 303f7ee0b2087f3df5c8b3f93cd8622f907d0d27467c6ff042c5faaa2b74f20e6dacff62b05cb1dcaf38dfc296a573369956205254d944593c6a3d9acb3bd6a2
- SSDEEP 24576:PENJKEt6dq8hXj8R2vxW870KH3e5GqR6FokG81Cvz44sLy0aZJQ5Te6Lg:PENwzIR257BuIqR6FoRvku04YL
- TLSH T138A54A10AB508029FAF752F55AADE1AC951C7DF0879860CBB1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_ba0cfbe60daead7f5a7f9c155757969c_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_ba0cfbe60daead7f5a7f9c155757969c_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_ba0cfbe60daead7f5a7f9c155757969c_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 31ba57e62e2ebadb2ef9697a92b9f27ab4e1fb28f92224281dbe3984fffe3f1f
- MD5 ba0cfbe60daead7f5a7f9c155757969c
- SHA1 92e5e3f4fe935e02a62292d929ca1abfbe838bec
- SHA512 303f7ee0b2087f3df5c8b3f93cd8622f907d0d27467c6ff042c5faaa2b74f20e6dacff62b05cb1dcaf38dfc296a573369956205254d944593c6a3d9acb3bd6a2
- SSDEEP 24576:PENJKEt6dq8hXj8R2vxW870KH3e5GqR6FokG81Cvz44sLy0aZJQ5Te6Lg:PENwzIR257BuIqR6FoRvku04YL
- TLSH T138A54A10AB508029FAF752F55AADE1AC951C7DF0879860CBB1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory