General
- Target 2026-10-22_e8536e11e808ad37dac1ff973f9b55fb_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- Sample261023-e8fl6shw7y
- SHA256 50ac0b77b040e4245793e755688bb55641e3de93c67e80a80d4056f30089d5f1
- MD5 e8536e11e808ad37dac1ff973f9b55fb
- SHA1 777c76497c27a122f7c1ff37122ea58220126f3d
- SHA512 cf051383b3334ed06697cabf82dd1e7cf2874a81c3be71a30c163b535bae7319fd39dcb85f534ea51d8635cbccda85bd4318565c6e92392fbb572f67d5f4ce8c
- SSDEEP 24576:cENJKEt6dq8hXj8R2vxW870KHYe5GqR6FokG81Cvz44sLy0aZJQ5Te6LoKC:cENwzIR257B7IqR6FoRvku04YL
- TLSH T140A54A10AB508029FAF752F55AADE1BC951C7DF0879860CBA1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_e8536e11e808ad37dac1ff973f9b55fb_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_e8536e11e808ad37dac1ff973f9b55fb_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_e8536e11e808ad37dac1ff973f9b55fb_amadey_elex_remcos_smoke-loader_vidar
- Size 2.0MB
- SHA256 50ac0b77b040e4245793e755688bb55641e3de93c67e80a80d4056f30089d5f1
- MD5 e8536e11e808ad37dac1ff973f9b55fb
- SHA1 777c76497c27a122f7c1ff37122ea58220126f3d
- SHA512 cf051383b3334ed06697cabf82dd1e7cf2874a81c3be71a30c163b535bae7319fd39dcb85f534ea51d8635cbccda85bd4318565c6e92392fbb572f67d5f4ce8c
- SSDEEP 24576:cENJKEt6dq8hXj8R2vxW870KHYe5GqR6FokG81Cvz44sLy0aZJQ5Te6LoKC:cENwzIR257B7IqR6FoRvku04YL
- TLSH T140A54A10AB508029FAF752F55AADE1BC951C7DF0879860CBA1D577FA46362F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory