General
- Target 2026-10-25_733cc693613194d20ebc5c25599c627f_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- Sample261027-aa52ysxt5q
- SHA256 fbc265ed910e6c251c2c55e50fd4d12121bf15ceb8d0089e732f40cc66a7ad01
- MD5 733cc693613194d20ebc5c25599c627f
- SHA1 4e4be451ae859eaf3f0015d5d4ff21cc408edad3
- SHA512 09fb6ee07232f925dc59c73dfbdea83eb3dee5813f8aa475cb5fd9bf6499c3ab3f06a424c5b057e9ffe91accd6a2e792375eecd74df940ba76b4ccd4ded5fd1f
- SSDEEP 24576:EENJKEt6dq8hXj8R2vxW870KHEe5GqR6FokG81Cvz44sLy0aZJQ5Te6LrWL:EENwzIR257BHIqR6FoRvku04YLi
- TLSH T1DFA54A10B7508029FAF352F55ABDE16CA51D7DF087A860CBA0D577FA46366E02D3234B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_733cc693613194d20ebc5c25599c627f_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_733cc693613194d20ebc5c25599c627f_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_733cc693613194d20ebc5c25599c627f_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- SHA256 fbc265ed910e6c251c2c55e50fd4d12121bf15ceb8d0089e732f40cc66a7ad01
- MD5 733cc693613194d20ebc5c25599c627f
- SHA1 4e4be451ae859eaf3f0015d5d4ff21cc408edad3
- SHA512 09fb6ee07232f925dc59c73dfbdea83eb3dee5813f8aa475cb5fd9bf6499c3ab3f06a424c5b057e9ffe91accd6a2e792375eecd74df940ba76b4ccd4ded5fd1f
- SSDEEP 24576:EENJKEt6dq8hXj8R2vxW870KHEe5GqR6FokG81Cvz44sLy0aZJQ5Te6LrWL:EENwzIR257BHIqR6FoRvku04YLi
- TLSH T1DFA54A10B7508029FAF352F55ABDE16CA51D7DF087A860CBA0D577FA46366E02D3234B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory