General
- Target 2026-10-22_f54c0ba1812dc23174151e0acff51dc8_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- Sample261023-cl33vahs3s
- SHA256 f90b753a733e49094486af89a93a1b3968e6c7b571d63cbac0fb77ee4d145941
- MD5 f54c0ba1812dc23174151e0acff51dc8
- SHA1 e76ade096ca98d47f330296d2d47d3eec2909c93
- SHA512 37db0f54e5945bad4363f5e216ee9315863b7c2b6e5437d6a3b4fa3e65be0ff0cdacd399fe35a590f95dbe5a614e498f9475ab824a4651f6c38e7f39f28eb81e
- SSDEEP 24576:pENJKEt6dq8hXj8R2vxW870KHNe5GqR6FokG81Cvz44sLy0aZJQ5Te6LdDqv:pENwzIR257BMIqR6FoRvku04YLs
- TLSH T1FAA54910AB508028FAF752F55AADE1BC951C7DB0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_f54c0ba1812dc23174151e0acff51dc8_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f54c0ba1812dc23174151e0acff51dc8_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f54c0ba1812dc23174151e0acff51dc8_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- SHA256 f90b753a733e49094486af89a93a1b3968e6c7b571d63cbac0fb77ee4d145941
- MD5 f54c0ba1812dc23174151e0acff51dc8
- SHA1 e76ade096ca98d47f330296d2d47d3eec2909c93
- SHA512 37db0f54e5945bad4363f5e216ee9315863b7c2b6e5437d6a3b4fa3e65be0ff0cdacd399fe35a590f95dbe5a614e498f9475ab824a4651f6c38e7f39f28eb81e
- SSDEEP 24576:pENJKEt6dq8hXj8R2vxW870KHNe5GqR6FokG81Cvz44sLy0aZJQ5Te6LdDqv:pENwzIR257BMIqR6FoRvku04YLs
- TLSH T1FAA54910AB508028FAF752F55AADE1BC951C7DB0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory