General
- Target 2026-11-02_ce1e21aed572039a8dc5bdb779ff2d36_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- Sample261102-2af7dadv9w
- SHA256 68e9a28d7797f6c76dc962fb994098427569b71c13bf0fa5a6860688e2ac78e2
- MD5 ce1e21aed572039a8dc5bdb779ff2d36
- SHA1 897460c3690c73e2b1b1b043eb0b7f3fa2c58a01
- SHA512 7abff683ae6fcd4f9395b420e4baf91872d18f9a5b4b3eda3ef1ceb898a3d6a1f0cd8f2b2390991302045159f2880d4fabfff5705f5cec6c7c35d11c97331b5f
- SSDEEP 24576:oENJKEt6dq8hXj8R2vxW870KHFe5GqR6FokG81Cvz44sLy0aZJQ5Te6L5YJLg:oENwzIR257BkIqR6FoRvku04YL5YF
- TLSH T1D0A54A10BB508028FAE752F55AADE1AC951C7DF08B9860CBB1D577FA56362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_ce1e21aed572039a8dc5bdb779ff2d36_amadey_elex_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_ce1e21aed572039a8dc5bdb779ff2d36_amadey_elex_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_ce1e21aed572039a8dc5bdb779ff2d36_amadey_elex_remcos_smoke-loader
- Size 2.1MB
- SHA256 68e9a28d7797f6c76dc962fb994098427569b71c13bf0fa5a6860688e2ac78e2
- MD5 ce1e21aed572039a8dc5bdb779ff2d36
- SHA1 897460c3690c73e2b1b1b043eb0b7f3fa2c58a01
- SHA512 7abff683ae6fcd4f9395b420e4baf91872d18f9a5b4b3eda3ef1ceb898a3d6a1f0cd8f2b2390991302045159f2880d4fabfff5705f5cec6c7c35d11c97331b5f
- SSDEEP 24576:oENJKEt6dq8hXj8R2vxW870KHFe5GqR6FokG81Cvz44sLy0aZJQ5Te6L5YJLg:oENwzIR257BkIqR6FoRvku04YL5YF
- TLSH T1D0A54A10BB508028FAE752F55AADE1AC951C7DF08B9860CBB1D577FA56362F02D33287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Drops file in System32 directory