General
- Target 2026-10-26_f6a306d2b87a425b00123f01c054fc4f_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- Sample261027-cb3z4acd86
- SHA256 fb60e7c3035fae59d3596eb71ed2b64bdce315259b0bcc47f6b6b3cea947e6bf
- MD5 f6a306d2b87a425b00123f01c054fc4f
- SHA1 32ac012ef11ea438219b7631a056cdc3c929b4bd
- SHA512 e2b53db64916a3fc724e91dc4a47fa3512dc966dad06d082e70110728492ad2f0a110a09ec4c7ac407329694649b225219b097695590e606baa9e5a15bcdd770
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6Lz:tENwzIR257BAIqR6FoRvku04YL
- TLSH T1D4A52910A7508029FAE752F55AADE1BC951C7DF0879860CBB1DD76FA47362E02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_f6a306d2b87a425b00123f01c054fc4f_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_f6a306d2b87a425b00123f01c054fc4f_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_f6a306d2b87a425b00123f01c054fc4f_amadey_elex_remcos_smoke-loader
- Size 2.0MB
- SHA256 fb60e7c3035fae59d3596eb71ed2b64bdce315259b0bcc47f6b6b3cea947e6bf
- MD5 f6a306d2b87a425b00123f01c054fc4f
- SHA1 32ac012ef11ea438219b7631a056cdc3c929b4bd
- SHA512 e2b53db64916a3fc724e91dc4a47fa3512dc966dad06d082e70110728492ad2f0a110a09ec4c7ac407329694649b225219b097695590e606baa9e5a15bcdd770
- SSDEEP 24576:tENJKEt6dq8hXj8R2vxW870KHhe5GqR6FokG81Cvz44sLy0aZJQ5Te6Lz:tENwzIR257BAIqR6FoRvku04YL
- TLSH T1D4A52910A7508029FAE752F55AADE1BC951C7DF0879860CBB1DD76FA47362E02D3328B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory