General
- Target 2026-10-25_c63a609d28b2ce7f37a6266b5b455d1a_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261026-p5qcbabb39
- SHA256 8e50795ea1a8f6193cde3d7aaf78238553022f7b496ccc37f498a7d468aa67fd
- MD5 c63a609d28b2ce7f37a6266b5b455d1a
- SHA1 9c9d28e637fd6e23bfaecbb1ff32c48c0b6f3748
- SHA512 b45254907a9884a7e7a79f6fb6c105cbc4993cec6d167551188f4fd3d70f5a850c6527368c7ef60b24e8724309002f4cba5fb9acb7028542017716d7022334f0
- SSDEEP 24576:xENJKEt6dq8hXj8R2vxW870KHYe5GqR6FokG81Cvz44sLy0aZJQ5Te6LAv:xENwzIR257B7IqR6FoRvku04YL
- TLSH T1D6A54A10AB508029FAF752F55AADE1AC941C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_c63a609d28b2ce7f37a6266b5b455d1a_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_c63a609d28b2ce7f37a6266b5b455d1a_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_c63a609d28b2ce7f37a6266b5b455d1a_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 8e50795ea1a8f6193cde3d7aaf78238553022f7b496ccc37f498a7d468aa67fd
- MD5 c63a609d28b2ce7f37a6266b5b455d1a
- SHA1 9c9d28e637fd6e23bfaecbb1ff32c48c0b6f3748
- SHA512 b45254907a9884a7e7a79f6fb6c105cbc4993cec6d167551188f4fd3d70f5a850c6527368c7ef60b24e8724309002f4cba5fb9acb7028542017716d7022334f0
- SSDEEP 24576:xENJKEt6dq8hXj8R2vxW870KHYe5GqR6FokG81Cvz44sLy0aZJQ5Te6LAv:xENwzIR257B7IqR6FoRvku04YL
- TLSH T1D6A54A10AB508029FAF752F55AADE1AC941C7DF0879860CBB1D577FA46366F02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory