General
- Target 2026-10-25_ac080175d2969c78e707ee209b12b799_amadey_elex_remcos_smoke-loader_vidar
- Size 8.2MB
- Sample261026-txj8jsf16j
- SHA256 37cb0492d24c8ceecc65e7678942ff67bff5799388fba56f424c4b04c8ec650e
- MD5 ac080175d2969c78e707ee209b12b799
- SHA1 3d841597ab8445dc8886b8ee747f594f0019f0a2
- SHA512 be016c9bbd8a9d961e66009fa9fc46fe50ea9ad8f6c34d9de9f7f2b0f0fb66758182a7a2a6aad1364e7ca1170e56362fc4c4adee4ffa12fae93f918cbb70b96e
- SSDEEP 49152:JENwzIR257BjIqR6FoRvku04YLyVxQb54nLIb0D+kXqZOYtt3PQYPFJqfvhGniZt:JgwkQ7NIqMeUYvY8Fn9lcBV0Bc
- TLSH T146865A11ABE480E4F1B7E2B8897AD575F6727C514F30A6CB0191DAAE2F736D04D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_ac080175d2969c78e707ee209b12b799_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_ac080175d2969c78e707ee209b12b799_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_ac080175d2969c78e707ee209b12b799_amadey_elex_remcos_smoke-loader_vidar
- Size 8.2MB
- SHA256 37cb0492d24c8ceecc65e7678942ff67bff5799388fba56f424c4b04c8ec650e
- MD5 ac080175d2969c78e707ee209b12b799
- SHA1 3d841597ab8445dc8886b8ee747f594f0019f0a2
- SHA512 be016c9bbd8a9d961e66009fa9fc46fe50ea9ad8f6c34d9de9f7f2b0f0fb66758182a7a2a6aad1364e7ca1170e56362fc4c4adee4ffa12fae93f918cbb70b96e
- SSDEEP 49152:JENwzIR257BjIqR6FoRvku04YLyVxQb54nLIb0D+kXqZOYtt3PQYPFJqfvhGniZt:JgwkQ7NIqMeUYvY8Fn9lcBV0Bc
- TLSH T146865A11ABE480E4F1B7E2B8897AD575F6727C514F30A6CB0191DAAE2F736D04D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory