General
- Target 2026-10-22_265391f188c13d99cb6f9103c5761f8b_amadey_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- Sample261024-xe5cjsdv3l
- SHA256 5e826779cfdb6e640d1bb9bdb972107ac5a2d75209b79ed803da9abd2644aa00
- MD5 265391f188c13d99cb6f9103c5761f8b
- SHA1 4c48358c7193a025668d47007f3cb1207a302edb
- SHA512 a9793636411804973423a805b8e4c8c4caeb838fbdf20e12177633bd0356d93b10ceb2f155893145c68162700b3553b325d946c3b8b6cb017ac1e1296c817c13
- SSDEEP 24576:MENJKEt6dq8hXj8R2vxW870KHMe5GqR6FokG81Cvz44sLy0aZJQ5Te6LqSjgFS:MENwzIR257BPIqR6FoRvku04YLVu
- TLSH T1FBB55C10BB508024FAE752F54AADE178A5297DF04B9860CBA1D5B7FE4A366F02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_265391f188c13d99cb6f9103c5761f8b_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_265391f188c13d99cb6f9103c5761f8b_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_265391f188c13d99cb6f9103c5761f8b_amadey_elex_remcos_smoke-loader_vidar
- Size 2.2MB
- SHA256 5e826779cfdb6e640d1bb9bdb972107ac5a2d75209b79ed803da9abd2644aa00
- MD5 265391f188c13d99cb6f9103c5761f8b
- SHA1 4c48358c7193a025668d47007f3cb1207a302edb
- SHA512 a9793636411804973423a805b8e4c8c4caeb838fbdf20e12177633bd0356d93b10ceb2f155893145c68162700b3553b325d946c3b8b6cb017ac1e1296c817c13
- SSDEEP 24576:MENJKEt6dq8hXj8R2vxW870KHMe5GqR6FokG81Cvz44sLy0aZJQ5Te6LqSjgFS:MENwzIR257BPIqR6FoRvku04YLVu
- TLSH T1FBB55C10BB508024FAE752F54AADE178A5297DF04B9860CBA1D5B7FE4A366F02D33347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory