General
- Target 2026-10-26_e7bad67f59fe5ce3245f952f14f130d6_amadey_elex_remcos_smoke-loader_vidar
- Size 2.8MB
- Sample261027-eexctsbs6r
- SHA256 c5bf4592766f2e3c69132eda0ede5247abca766e032c46ad43bc773d41d3eb50
- MD5 e7bad67f59fe5ce3245f952f14f130d6
- SHA1 9e3cceb159704390e9d5a24866006aaeaeb1dba1
- SHA512 7d96467d9601f539217f988e39eda436f5584aac0788a3be75994c4066978576e66ec4085485b71580ca5b4ca10dfb0285118268dfdccf31daadacbcba0300f1
- SSDEEP 49152:ZENwzIR257BVIqR6FoRvku04YLtsMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMf:ZgwkQ77IqMeLMMHMMMvMMZMMMlmMMMiS
- TLSH T147D56C11B7508028F9F712B14ABEE2689529BCB08B5850CF71D977FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_e7bad67f59fe5ce3245f952f14f130d6_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_e7bad67f59fe5ce3245f952f14f130d6_amadey_elex_remcos_smoke-loader_vidar
- Size 2.8MB
- SHA256 c5bf4592766f2e3c69132eda0ede5247abca766e032c46ad43bc773d41d3eb50
- MD5 e7bad67f59fe5ce3245f952f14f130d6
- SHA1 9e3cceb159704390e9d5a24866006aaeaeb1dba1
- SHA512 7d96467d9601f539217f988e39eda436f5584aac0788a3be75994c4066978576e66ec4085485b71580ca5b4ca10dfb0285118268dfdccf31daadacbcba0300f1
- SSDEEP 49152:ZENwzIR257BVIqR6FoRvku04YLtsMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMf:ZgwkQ77IqMeLMMHMMMvMMZMMMlmMMMiS
- TLSH T147D56C11B7508028F9F712B14ABEE2689529BCB08B5850CF71D977FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory