General
- Target 2026-10-22_82d936ec09c7db99c0f8456336a98890_amadey_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- Sample261024-hdchtaas5l
- SHA256 ef57f9fad6c4dbdf4c8dbf781323e2760616eafee93cc62d98b007aff803e1fc
- MD5 82d936ec09c7db99c0f8456336a98890
- SHA1 4936aa90342976a47464c8f1fa0d66a8a7c3317c
- SHA512 2532adc2d16aa69469753b63b9c0625b71a4b1905067ca75198003e5c86d82d5bf956016a31a5006c245f267b5c9a041378c52ced88958d40521531c903c14c8
- SSDEEP 24576:dENJKEt6dq8hXj8R2vxW870KH1e5GqR6FokG81Cvz44sLy0aZJQ5Te6LcmXIrde:dENwzIR257B0IqR6FoRvku04YLczB
- TLSH T141B55A10BB508028FAF752B55ABEE1AC951D7DF0879860CBB1D577FA46362E02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_82d936ec09c7db99c0f8456336a98890_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_82d936ec09c7db99c0f8456336a98890_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_82d936ec09c7db99c0f8456336a98890_amadey_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- SHA256 ef57f9fad6c4dbdf4c8dbf781323e2760616eafee93cc62d98b007aff803e1fc
- MD5 82d936ec09c7db99c0f8456336a98890
- SHA1 4936aa90342976a47464c8f1fa0d66a8a7c3317c
- SHA512 2532adc2d16aa69469753b63b9c0625b71a4b1905067ca75198003e5c86d82d5bf956016a31a5006c245f267b5c9a041378c52ced88958d40521531c903c14c8
- SSDEEP 24576:dENJKEt6dq8hXj8R2vxW870KH1e5GqR6FokG81Cvz44sLy0aZJQ5Te6LcmXIrde:dENwzIR257B0IqR6FoRvku04YLczB
- TLSH T141B55A10BB508028FAF752B55ABEE1AC951D7DF0879860CBB1D577FA46362E02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory