General
- Target 2026-10-22_93d011191800846107618b966381c4ed_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample261024-ezzcxsw14k
- SHA256 a0c91c8627e31059fa7b0d13eb35a6efb9c34c64fa7d3ab4f5979f6e840eb17c
- MD5 93d011191800846107618b966381c4ed
- SHA1 e3af0f9ddb682038f7366cfd002aa12ed640ba21
- SHA512 ba2671b1d91461684f889eade72f67e8c9950fea3eb1e29457518106dbf8dd9abcca54d0e419b708b1e11dbb4d7fd0e17569649d495c4a3e441c294763a9d3de
- SSDEEP 49152:FENwzIR257BWIqR6FoRvku04YLtrsn9tK:FgwkQ74IqMe2Q
- TLSH T1A6C56D10BB508064FAA752B54ABEE1B8E5297CB04B5461CBA1D5F7FE0E362F02D36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_93d011191800846107618b966381c4ed_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_93d011191800846107618b966381c4ed_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_93d011191800846107618b966381c4ed_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 a0c91c8627e31059fa7b0d13eb35a6efb9c34c64fa7d3ab4f5979f6e840eb17c
- MD5 93d011191800846107618b966381c4ed
- SHA1 e3af0f9ddb682038f7366cfd002aa12ed640ba21
- SHA512 ba2671b1d91461684f889eade72f67e8c9950fea3eb1e29457518106dbf8dd9abcca54d0e419b708b1e11dbb4d7fd0e17569649d495c4a3e441c294763a9d3de
- SSDEEP 49152:FENwzIR257BWIqR6FoRvku04YLtrsn9tK:FgwkQ74IqMe2Q
- TLSH T1A6C56D10BB508064FAA752B54ABEE1B8E5297CB04B5461CBA1D5F7FE0E362F02D36347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory