General
- Target 2026-10-22_2d1fa078ae654836e1379182d9fdcdc5_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- Sample261024-wk12msbv3s
- SHA256 4de624824424349e02535b04fcb8cd5be33e483f999169bb5ef205c4bb4d04a7
- MD5 2d1fa078ae654836e1379182d9fdcdc5
- SHA1 b652d34a768ecd1bc2cf41ba05aa7d0f096aa7cb
- SHA512 035624a478bd79d047a7f9211595f8579ef9155b52082ab7af8f33739b5afc678f28cd9c5f86482886ca7b577649dd1a65224a61368a69e4484e750418fddb5a
- SSDEEP 24576:qENJKEt6dq8hXj8R2vxW870KHse5GqR6FokG81Cvz44sLy0aZJQ5Te6Lx9RW:qENwzIR257BvIqR6FoRvku04YLR
- TLSH T19DA54B10A7508029FAF752F55ABDE1BC952C7DF08B9860CBA1D577FA86362E02D33247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_2d1fa078ae654836e1379182d9fdcdc5_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_2d1fa078ae654836e1379182d9fdcdc5_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_2d1fa078ae654836e1379182d9fdcdc5_amadey_elex_remcos_smoke-loader_vidar
- Size 2.1MB
- SHA256 4de624824424349e02535b04fcb8cd5be33e483f999169bb5ef205c4bb4d04a7
- MD5 2d1fa078ae654836e1379182d9fdcdc5
- SHA1 b652d34a768ecd1bc2cf41ba05aa7d0f096aa7cb
- SHA512 035624a478bd79d047a7f9211595f8579ef9155b52082ab7af8f33739b5afc678f28cd9c5f86482886ca7b577649dd1a65224a61368a69e4484e750418fddb5a
- SSDEEP 24576:qENJKEt6dq8hXj8R2vxW870KHse5GqR6FokG81Cvz44sLy0aZJQ5Te6Lx9RW:qENwzIR257BvIqR6FoRvku04YLR
- TLSH T19DA54B10A7508029FAF752F55ABDE1BC952C7DF08B9860CBA1D577FA86362E02D33247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory