General
- Target 2026-10-26_a770e06a2b717292affcf20965055d73_amadey_elex_remcos_smoke-loader_vidar
- Size 2.8MB
- Sample261027-lx64bas1cs
- SHA256 f66d7315aa8d0598b2f03dc7293a799445c6a53d73fb93be1a7e127d8205670a
- MD5 a770e06a2b717292affcf20965055d73
- SHA1 9f8e5c004bbec18d8202b96e901dc68c5e3b62b7
- SHA512 e355895b62e11f5950676726e03f9c5e32778bd4b461672bf9f686da0fe1733125d55e5df42d927fa94144276bd75525b1ed2182eedfab906089e0c13d1da556
- SSDEEP 49152:ZENwzIR257BVIqR6FoRvku04YLssMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMf:ZgwkQ77IqMeMMMHMMMvMMZMMMlmMMMiS
- TLSH T1BAD57C10B7508029F9F712B14ABEE2A89529BCB08B5850CF71D577FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_a770e06a2b717292affcf20965055d73_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_a770e06a2b717292affcf20965055d73_amadey_elex_remcos_smoke-loader_vidar
- Size 2.8MB
- SHA256 f66d7315aa8d0598b2f03dc7293a799445c6a53d73fb93be1a7e127d8205670a
- MD5 a770e06a2b717292affcf20965055d73
- SHA1 9f8e5c004bbec18d8202b96e901dc68c5e3b62b7
- SHA512 e355895b62e11f5950676726e03f9c5e32778bd4b461672bf9f686da0fe1733125d55e5df42d927fa94144276bd75525b1ed2182eedfab906089e0c13d1da556
- SSDEEP 49152:ZENwzIR257BVIqR6FoRvku04YLssMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMf:ZgwkQ77IqMeMMMHMMMvMMZMMMlmMMMiS
- TLSH T1BAD57C10B7508029F9F712B14ABEE2A89529BCB08B5850CF71D577FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory