General
- Target 2026-10-22_98259f2c9c9daeeb62e5ec6cd758742e_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 2.3MB
- Sample261024-d96djsfv9y
- SHA256 2168e96ad0fae4cf7019068e3ae67cba9753790ad0776e9df1f9ef318aade5cc
- MD5 98259f2c9c9daeeb62e5ec6cd758742e
- SHA1 5e6d691045599ae7b7a7cfd1ec28bf34d90308e0
- SHA512 9946d33f86efded869064b2ebe8f8c3171124d1d2fef64edc032d4ec279eb024fade404128ad8ade2f0d069e227ceeba50c772b02ae88067105e6f6a3e8fe1ad
- SSDEEP 49152:RENwzIR257BxIqR6FoRvku04YLj0//jkb5L8:RgwkQ73IqMebjk98
- TLSH T1B6B55B10B7508029FEF752B54AADE178952D7CB047A8A0CBA1D577FA9A372E02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_98259f2c9c9daeeb62e5ec6cd758742e_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_98259f2c9c9daeeb62e5ec6cd758742e_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_98259f2c9c9daeeb62e5ec6cd758742e_amadey_elex_icedid_njrat_remcos_smoke-loader_vidar
- Size 2.3MB
- SHA256 2168e96ad0fae4cf7019068e3ae67cba9753790ad0776e9df1f9ef318aade5cc
- MD5 98259f2c9c9daeeb62e5ec6cd758742e
- SHA1 5e6d691045599ae7b7a7cfd1ec28bf34d90308e0
- SHA512 9946d33f86efded869064b2ebe8f8c3171124d1d2fef64edc032d4ec279eb024fade404128ad8ade2f0d069e227ceeba50c772b02ae88067105e6f6a3e8fe1ad
- SSDEEP 49152:RENwzIR257BxIqR6FoRvku04YLj0//jkb5L8:RgwkQ73IqMebjk98
- TLSH T1B6B55B10B7508029FEF752B54AADE178952D7CB047A8A0CBA1D577FA9A372E02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory