General
- Target 2026-10-22_071d38c2ee20051b9d5ef90271d7dd62_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261024-2lt8dasv8r
- SHA256 dfb7fd84525c2bf43ae3691334100dda9f638be0c8f5ace00500f40f9d92f954
- MD5 071d38c2ee20051b9d5ef90271d7dd62
- SHA1 ec5c2e729d7ed6b3b47a86b04659b52c839a8673
- SHA512 a5e732a33f117ad8890a8ca673576c6f49e0d6acd5d09d05b0643eb4bcda237020de6b8fc444b36fc8e2ff936b8f5b2c46d04e71ae506745ae992a961ebfeea9
- SSDEEP 24576:7ENJKEt6dq8hXj8R2vxW870KH8e5GqR6FokG81Cvz44sLy0aZJQ5Te6LoF:7ENwzIR257BfIqR6FoRvku04YL
- TLSH T129A54A10AB508028FAE752F55AADE1BC951C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_071d38c2ee20051b9d5ef90271d7dd62_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_071d38c2ee20051b9d5ef90271d7dd62_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_071d38c2ee20051b9d5ef90271d7dd62_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 dfb7fd84525c2bf43ae3691334100dda9f638be0c8f5ace00500f40f9d92f954
- MD5 071d38c2ee20051b9d5ef90271d7dd62
- SHA1 ec5c2e729d7ed6b3b47a86b04659b52c839a8673
- SHA512 a5e732a33f117ad8890a8ca673576c6f49e0d6acd5d09d05b0643eb4bcda237020de6b8fc444b36fc8e2ff936b8f5b2c46d04e71ae506745ae992a961ebfeea9
- SSDEEP 24576:7ENJKEt6dq8hXj8R2vxW870KH8e5GqR6FokG81Cvz44sLy0aZJQ5Te6LoF:7ENwzIR257BfIqR6FoRvku04YL
- TLSH T129A54A10AB508028FAE752F55AADE1BC951C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory