General
- Target 2026-10-26_fc8a265a67ae1d1fa6158098e7ee6c83_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261027-bk6a5scd48
- SHA256 1bd8fe2c1fc5c95d51592d9f238ca14e3d4e7d0c0b49c8e290cc6053a56dbb9b
- MD5 fc8a265a67ae1d1fa6158098e7ee6c83
- SHA1 0c797ce1f4d4568c784726afe7913f92f859e241
- SHA512 762786ccc17d533fb51e2980ee328fce6a588a3066affedf378e041dac9a769f6e936d66d54a5062b2a834cda9e8792aa63f667968e730928068bcf495ad07ce
- SSDEEP 24576:hENJKEt6dq8hXj8R2vxW870KHIe5GqR6FokG81Cvz44sLy0aZJQ5Te6LhP:hENwzIR257BLIqR6FoRvku04YL
- TLSH T1ECA54A10AB508029FAF752F55AADE1AC951C7DF0879860CBB1D577FA86362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_fc8a265a67ae1d1fa6158098e7ee6c83_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_fc8a265a67ae1d1fa6158098e7ee6c83_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_fc8a265a67ae1d1fa6158098e7ee6c83_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 1bd8fe2c1fc5c95d51592d9f238ca14e3d4e7d0c0b49c8e290cc6053a56dbb9b
- MD5 fc8a265a67ae1d1fa6158098e7ee6c83
- SHA1 0c797ce1f4d4568c784726afe7913f92f859e241
- SHA512 762786ccc17d533fb51e2980ee328fce6a588a3066affedf378e041dac9a769f6e936d66d54a5062b2a834cda9e8792aa63f667968e730928068bcf495ad07ce
- SSDEEP 24576:hENJKEt6dq8hXj8R2vxW870KHIe5GqR6FokG81Cvz44sLy0aZJQ5Te6LhP:hENwzIR257BLIqR6FoRvku04YL
- TLSH T1ECA54A10AB508029FAF752F55AADE1AC951C7DF0879860CBB1D577FA86362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory