General
- Target 2026-10-22_300cb237be74529bf5d07ff89632c9b7_amadey_elex_remcos_smoke-loader
- Size 2.3MB
- Sample261024-v7rwtafd69
- SHA256 f0b8160e70a7df95a7de8fcc79254edbb30aafe422d486c27a128b9be24c795d
- MD5 300cb237be74529bf5d07ff89632c9b7
- SHA1 c053986bf8f25fc7834c45991d105bfae2088fc2
- SHA512 0d1306339c60f498eb53999239fab2761e5f69bb36e5ca05d521c7bf779f7d16298f44f3910c40bf0b52827aaf5cc292685a3871a585dfcc593ccc5f8f579f65
- SSDEEP 49152:2ENwzIR257BLIqR6FoRvku04YLrBz1F3ccT:2gwkQ79IqMe4
- TLSH T1F4B56B10F7508065FAE752B44AADE1A895297CB08B9890CFB1D577FE4A362F12D3334B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_300cb237be74529bf5d07ff89632c9b7_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_300cb237be74529bf5d07ff89632c9b7_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_300cb237be74529bf5d07ff89632c9b7_amadey_elex_remcos_smoke-loader
- Size 2.3MB
- SHA256 f0b8160e70a7df95a7de8fcc79254edbb30aafe422d486c27a128b9be24c795d
- MD5 300cb237be74529bf5d07ff89632c9b7
- SHA1 c053986bf8f25fc7834c45991d105bfae2088fc2
- SHA512 0d1306339c60f498eb53999239fab2761e5f69bb36e5ca05d521c7bf779f7d16298f44f3910c40bf0b52827aaf5cc292685a3871a585dfcc593ccc5f8f579f65
- SSDEEP 49152:2ENwzIR257BLIqR6FoRvku04YLrBz1F3ccT:2gwkQ79IqMe4
- TLSH T1F4B56B10F7508065FAE752B44AADE1A895297CB08B9890CFB1D577FE4A362F12D3334B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory