General
- Target 2026-10-22_29381ebb590ed6647c524ec026247183_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample261024-w1827abw4s
- SHA256 56a6fb6e70b295c3dc7521a43ff1d83f085dc6306593a3a4025d1a9efec75b8d
- MD5 29381ebb590ed6647c524ec026247183
- SHA1 8fe1b10a1404bce5b84ea55685a53e512b94a038
- SHA512 1a976c1abac2adb647b19e83891399a19738e86bdb122e865c9c4a94bb0cab605ec990b43de7cf3d81bae946921462ce0c0fa4bb550f37285e33c4999d7ed6b4
- SSDEEP 49152:sENwzIR257BaIqR6FoRvku04YLplPSef4s6tX:sgwkQ7QIqMemf
- TLSH T1EAC54A1CEF508C64F9A251B54AAED37CA5287CB04B5850CB61D5B3EEDA36FE02D32247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_29381ebb590ed6647c524ec026247183_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_29381ebb590ed6647c524ec026247183_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_29381ebb590ed6647c524ec026247183_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 56a6fb6e70b295c3dc7521a43ff1d83f085dc6306593a3a4025d1a9efec75b8d
- MD5 29381ebb590ed6647c524ec026247183
- SHA1 8fe1b10a1404bce5b84ea55685a53e512b94a038
- SHA512 1a976c1abac2adb647b19e83891399a19738e86bdb122e865c9c4a94bb0cab605ec990b43de7cf3d81bae946921462ce0c0fa4bb550f37285e33c4999d7ed6b4
- SSDEEP 49152:sENwzIR257BaIqR6FoRvku04YLplPSef4s6tX:sgwkQ7QIqMemf
- TLSH T1EAC54A1CEF508C64F9A251B54AAED37CA5287CB04B5850CB61D5B3EEDA36FE02D32247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory