General
- Target 2026-10-25_a147ad229bb4525b13c0760679dbfd2c_amadey_elex_remcos_smoke-loader_vidar
- Size 2.8MB
- Sample261026-wevyfafw21
- SHA256 0e57b6e34b3aa4b6c28df97959dcbb6ea9b05428c9f4941f036ce2806704e811
- MD5 a147ad229bb4525b13c0760679dbfd2c
- SHA1 04f2aedb633f6f351744eef3651ebd0de1b3fe42
- SHA512 f51978dad48bef2c9a46b200243a8227c500cc6167cad4cef375fe4be1ea4f76ba97943e86563d823fb83d650d905a73ee6dcdc178790e243a99bcd21465ce2b
- SSDEEP 49152:xENwzIR257BlIqR6FoRvku04YLBKMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMf:xgwkQ7LIqMepMMHMMMvMMZMMMlmMMMiS
- TLSH T1A6D57C11B7908028F9F712B14ABEE2689529BCB08B5850CF71D577FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_a147ad229bb4525b13c0760679dbfd2c_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_a147ad229bb4525b13c0760679dbfd2c_amadey_elex_remcos_smoke-loader_vidar
- Size 2.8MB
- SHA256 0e57b6e34b3aa4b6c28df97959dcbb6ea9b05428c9f4941f036ce2806704e811
- MD5 a147ad229bb4525b13c0760679dbfd2c
- SHA1 04f2aedb633f6f351744eef3651ebd0de1b3fe42
- SHA512 f51978dad48bef2c9a46b200243a8227c500cc6167cad4cef375fe4be1ea4f76ba97943e86563d823fb83d650d905a73ee6dcdc178790e243a99bcd21465ce2b
- SSDEEP 49152:xENwzIR257BlIqR6FoRvku04YLBKMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMf:xgwkQ7LIqMepMMHMMMvMMZMMMlmMMMiS
- TLSH T1A6D57C11B7908028F9F712B14ABEE2689529BCB08B5850CF71D577FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory