General
- Target 2026-10-22_9b51d3b78a686a5f7e04651b35289c53_amadey_elex_remcos_smoke-loader_vidar
- Size 2.4MB
- Sample261024-dvc4fshv4l
- SHA256 aef56c5fd6040e02e9a1303c2408f79265c630da6b36ffd82a17d6692997524b
- MD5 9b51d3b78a686a5f7e04651b35289c53
- SHA1 4ed913a93abac0cd40f121b98cd7eec8da826fe3
- SHA512 9cd2bd80b487638decd61c078d262ac539c99993f97cd2b30aadc684496a0539b6de5b9f75006344511604b6a2649f93b1ca89a74c27da2e08f15e67d5cf9285
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHUe5GqR6FokG81Cvz44sLy0aZJQ5Te6LOndDHmk6:tENwzIR257B3IqR6FoRvku04YLQ4ke
- TLSH T128B56C10F7508024FAE752B54ABEE178E5297CF04B9860CB61D5B7FE9A362E02D36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_9b51d3b78a686a5f7e04651b35289c53_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_9b51d3b78a686a5f7e04651b35289c53_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_9b51d3b78a686a5f7e04651b35289c53_amadey_elex_remcos_smoke-loader_vidar
- Size 2.4MB
- SHA256 aef56c5fd6040e02e9a1303c2408f79265c630da6b36ffd82a17d6692997524b
- MD5 9b51d3b78a686a5f7e04651b35289c53
- SHA1 4ed913a93abac0cd40f121b98cd7eec8da826fe3
- SHA512 9cd2bd80b487638decd61c078d262ac539c99993f97cd2b30aadc684496a0539b6de5b9f75006344511604b6a2649f93b1ca89a74c27da2e08f15e67d5cf9285
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHUe5GqR6FokG81Cvz44sLy0aZJQ5Te6LOndDHmk6:tENwzIR257B3IqR6FoRvku04YLQ4ke
- TLSH T128B56C10F7508024FAE752B54ABEE178E5297CF04B9860CB61D5B7FE9A362E02D36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory