General
- Target 2026-10-22_685366fcc9dd5ecf3c81ca23df729b39_amadey_elex_hijackloader_remcos_smoke-loader_vidar
- Size 4.3MB
- Sample261024-mbgrzaa15m
- SHA256 6acf3167a23cc5b2b82ff7fdad80ab88cf0fc9f9c7b6e284cfab3f07a5fa45c1
- MD5 685366fcc9dd5ecf3c81ca23df729b39
- SHA1 18b7c4e2b56a8ce7517f932ea9b6f1ae999e7e66
- SHA512 ddf93eed2d41990be54a336acf562151b1c28e1e5d0ee66056f0c0e10eca4658d8b0c9ed66559dddd87de7433d20990a791438a54e3fd9f98d3fd21d22e9458f
- SSDEEP 49152:5ENwzIR257BoIqR6FoRvku04YLFENwzIR257BmIqR6FoRvku04YLlpnfMNJ:5gwkQ76IqMeUgwkQ74IqMe/
- TLSH T1CE264B10A7509428FAF752B55BBEE2E8952C7CB0479890CFA1C577F9463A2E13D32387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_685366fcc9dd5ecf3c81ca23df729b39_amadey_elex_hijackloader_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_685366fcc9dd5ecf3c81ca23df729b39_amadey_elex_hijackloader_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_685366fcc9dd5ecf3c81ca23df729b39_amadey_elex_hijackloader_remcos_smoke-loader_vidar
- Size 4.3MB
- SHA256 6acf3167a23cc5b2b82ff7fdad80ab88cf0fc9f9c7b6e284cfab3f07a5fa45c1
- MD5 685366fcc9dd5ecf3c81ca23df729b39
- SHA1 18b7c4e2b56a8ce7517f932ea9b6f1ae999e7e66
- SHA512 ddf93eed2d41990be54a336acf562151b1c28e1e5d0ee66056f0c0e10eca4658d8b0c9ed66559dddd87de7433d20990a791438a54e3fd9f98d3fd21d22e9458f
- SSDEEP 49152:5ENwzIR257BoIqR6FoRvku04YLFENwzIR257BmIqR6FoRvku04YLlpnfMNJ:5gwkQ76IqMeUgwkQ74IqMe/
- TLSH T1CE264B10A7509428FAF752B55BBEE2E8952C7CB0479890CFA1C577F9463A2E13D32387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory