General
- Target 2026-10-22_0856689cae9dec316e5f2d979eea8a79_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261024-2fynlsxvct
- SHA256 00666ee3b609903399ce7a23a6d7d88de42b0e3fe4e7bf50a2a8a75be0a4859b
- MD5 0856689cae9dec316e5f2d979eea8a79
- SHA1 b24cb1ed02b434e934e7c0a71bed31414199e134
- SHA512 1f8c8de48ca33895dbe5d4201772323a48a87f6f72032e12e6c4a2e55811fba41e74badb58ae887b9c1a8cb4eac9219b2661f4e12e743f48958ce8860dfdf125
- SSDEEP 24576:KENJKEt6dq8hXj8R2vxW870KHUe5GqR6FokG81Cvz44sLy0aZJQ5Te6L83Ta:KENwzIR257B3IqR6FoRvku04YL
- TLSH T14DA54A10AB508028FAE752F55AADE1BC951C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_0856689cae9dec316e5f2d979eea8a79_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_0856689cae9dec316e5f2d979eea8a79_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_0856689cae9dec316e5f2d979eea8a79_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 00666ee3b609903399ce7a23a6d7d88de42b0e3fe4e7bf50a2a8a75be0a4859b
- MD5 0856689cae9dec316e5f2d979eea8a79
- SHA1 b24cb1ed02b434e934e7c0a71bed31414199e134
- SHA512 1f8c8de48ca33895dbe5d4201772323a48a87f6f72032e12e6c4a2e55811fba41e74badb58ae887b9c1a8cb4eac9219b2661f4e12e743f48958ce8860dfdf125
- SSDEEP 24576:KENJKEt6dq8hXj8R2vxW870KHUe5GqR6FokG81Cvz44sLy0aZJQ5Te6L83Ta:KENwzIR257B3IqR6FoRvku04YL
- TLSH T14DA54A10AB508028FAE752F55AADE1BC951C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory