General
- Target 2026-10-22_9de51d4c0fe14ad6834987255d90ce7e_amadey_elex_remcos_smoke-loader
- Size 2.5MB
- Sample261024-dex4paft51
- SHA256 5c070ce85a8ffa65077c2a48284766a23c5f1de764d4501de261e2e1ccd5f856
- MD5 9de51d4c0fe14ad6834987255d90ce7e
- SHA1 6309acdaf564a59a4edb2ddbdafb5c399dfa7514
- SHA512 1456da8ab855450e669f107b9603685c5326ed72d67d1a662bf896f66729dff4794e52602cd4d027489b7fd6853e35a46ec3f9f08e50019afc917769a3cd1721
- SSDEEP 49152:YENwzIR257BZIqR6FoRvku04YL0dGhy6EqNZcBpeapeA:YgwkQ7fIqMemv
- TLSH T178C57C10F7408028F9E752F54AAEE178A5297CF0879860CFA1D577FA5A356E02E3734B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9de51d4c0fe14ad6834987255d90ce7e_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9de51d4c0fe14ad6834987255d90ce7e_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9de51d4c0fe14ad6834987255d90ce7e_amadey_elex_remcos_smoke-loader
- Size 2.5MB
- SHA256 5c070ce85a8ffa65077c2a48284766a23c5f1de764d4501de261e2e1ccd5f856
- MD5 9de51d4c0fe14ad6834987255d90ce7e
- SHA1 6309acdaf564a59a4edb2ddbdafb5c399dfa7514
- SHA512 1456da8ab855450e669f107b9603685c5326ed72d67d1a662bf896f66729dff4794e52602cd4d027489b7fd6853e35a46ec3f9f08e50019afc917769a3cd1721
- SSDEEP 49152:YENwzIR257BZIqR6FoRvku04YL0dGhy6EqNZcBpeapeA:YgwkQ7fIqMemv
- TLSH T178C57C10F7408028F9E752F54AAEE178A5297CF0879860CFA1D577FA5A356E02E3734B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory