General
- Target 2026-10-22_ada5968ec9560f8e0861dfd4971de32a_amadey_elex_remcos_smoke-loader_vidar
- Size 3.9MB
- Sample261024-a3jz7adh78
- SHA256 8bbc63469ffa44c6b3db77b2b5234cd76c121cc213ba5477ac2a514f535cf83d
- MD5 ada5968ec9560f8e0861dfd4971de32a
- SHA1 4a135d6ec9538464bcbfccf61f8515d7f4ffdd20
- SHA512 1f91d3528583391a101000e8c78f4f5fa18eef2428231cfd9142f652c32bfbb9b01bb573193d7202df86adb725b277c358367dbd69f79edc0abd8323ffe01d46
- SSDEEP 49152:JENwzIR257BLIqR6FoRvku04YLlrLe7sfC+k/P+pHirCy6PkzzNt93LgTBNmak:JgwkQ79IqMeKWG8d
- TLSH T162165B00ABA080A4F6F792B88ABAD574F5757CA14B7491CF1185E6AF5E337E01D39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_ada5968ec9560f8e0861dfd4971de32a_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_ada5968ec9560f8e0861dfd4971de32a_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_ada5968ec9560f8e0861dfd4971de32a_amadey_elex_remcos_smoke-loader_vidar
- Size 3.9MB
- SHA256 8bbc63469ffa44c6b3db77b2b5234cd76c121cc213ba5477ac2a514f535cf83d
- MD5 ada5968ec9560f8e0861dfd4971de32a
- SHA1 4a135d6ec9538464bcbfccf61f8515d7f4ffdd20
- SHA512 1f91d3528583391a101000e8c78f4f5fa18eef2428231cfd9142f652c32bfbb9b01bb573193d7202df86adb725b277c358367dbd69f79edc0abd8323ffe01d46
- SSDEEP 49152:JENwzIR257BLIqR6FoRvku04YLlrLe7sfC+k/P+pHirCy6PkzzNt93LgTBNmak:JgwkQ79IqMeKWG8d
- TLSH T162165B00ABA080A4F6F792B88ABAD574F5757CA14B7491CF1185E6AF5E337E01D39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory