General
- Target 2026-11-01_c7c75abc34e70c0e1519d24254b4a36b_amadey_elex_remcos_smoke-loader_vidar
- Size 2.7MB
- Sample261102-kxt83sax7p
- SHA256 6e28d880bb6f101482e67bd4f2e7177d614976768f41a5eb8f55f41daaffe808
- MD5 c7c75abc34e70c0e1519d24254b4a36b
- SHA1 3afa13e268075fa6d447c56015c679ab331e6bc2
- SHA512 2df747687e310d151ee55cf0091505077376dc878310a205a97eee680755d77a2cef07cdf79063072478a88f96bc226389b56b39011581d61ca7fb3b20655b76
- SSDEEP 49152:HENwzIR257BJIqR6FoRvku04YLxMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMY:HgwkQ73IqMeQMMHMMMvMMZMMMlmMMMiS
- TLSH T12CD57C11B7508028FAF712B14ABEE2689529BCB08B5850CF71D577FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c7c75abc34e70c0e1519d24254b4a36b_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c7c75abc34e70c0e1519d24254b4a36b_amadey_elex_remcos_smoke-loader_vidar
- Size 2.7MB
- SHA256 6e28d880bb6f101482e67bd4f2e7177d614976768f41a5eb8f55f41daaffe808
- MD5 c7c75abc34e70c0e1519d24254b4a36b
- SHA1 3afa13e268075fa6d447c56015c679ab331e6bc2
- SHA512 2df747687e310d151ee55cf0091505077376dc878310a205a97eee680755d77a2cef07cdf79063072478a88f96bc226389b56b39011581d61ca7fb3b20655b76
- SSDEEP 49152:HENwzIR257BJIqR6FoRvku04YLxMMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6MMZMMY:HgwkQ73IqMeQMMHMMMvMMZMMMlmMMMiS
- TLSH T12CD57C11B7508028FAF712B14ABEE2689529BCB08B5850CF71D577FE5A363E12D3364B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory