General
- Target 2026-10-24_ff1546f733ac5401b1591f9264ed3ae8_amadey_elex_remcos_smoke-loader
- Size 4.4MB
- Sample261024-3wt6ssxxbs
- SHA256 31a8f7a05680113067c72efb6ef41288a4f1a6cb27335b5bd9c937dc53431633
- MD5 ff1546f733ac5401b1591f9264ed3ae8
- SHA1 e3c01886018fb504191399b0726f34fc7daa5332
- SHA512 2259ead95333bdca6611e5032c88d5ed8027f7350c5d6fb47b2054b6d3c523e827cf5f1fcbc3915d0b232cfd970a41a102232db183de28294136d20127b40be7
- SSDEEP 98304:lgwkQ7tIqMeWrZ23AbsK6Ro022JjL2WEiVqJZ:lgwk1iQJADmmxL2WEoCZ
- TLSH T11126D010AB508029FAF712F55AAEE1BC951D7DF08B9860CBB1C576F946352F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-24_ff1546f733ac5401b1591f9264ed3ae8_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-24_ff1546f733ac5401b1591f9264ed3ae8_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-24_ff1546f733ac5401b1591f9264ed3ae8_amadey_elex_remcos_smoke-loader
- Size 4.4MB
- SHA256 31a8f7a05680113067c72efb6ef41288a4f1a6cb27335b5bd9c937dc53431633
- MD5 ff1546f733ac5401b1591f9264ed3ae8
- SHA1 e3c01886018fb504191399b0726f34fc7daa5332
- SHA512 2259ead95333bdca6611e5032c88d5ed8027f7350c5d6fb47b2054b6d3c523e827cf5f1fcbc3915d0b232cfd970a41a102232db183de28294136d20127b40be7
- SSDEEP 98304:lgwkQ7tIqMeWrZ23AbsK6Ro022JjL2WEiVqJZ:lgwk1iQJADmmxL2WEoCZ
- TLSH T11126D010AB508029FAF712F55AAEE1BC951D7DF08B9860CBB1C576F946352F12D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory