General
- Target 2026-11-02_fee30cdb8e9c7950c09d4ab83c665eb4_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- Sample261102-vmsbvady5m
- SHA256 bc7e30e801c64b4b5aee6062326658a811d67d505679c8ae01a5de6b8c9a1e1d
- MD5 fee30cdb8e9c7950c09d4ab83c665eb4
- SHA1 5156427f6dbe92e4dfa58908f61f9e9063efe011
- SHA512 919588b38521d666c9a4876d0e987800161ee8be02c7df0efd5bee87eb9ff6247192f2b67aa93461ac27bba7723f3a3f51b6905bf3ae1549ddc6e7e03b7b9ae3
- SSDEEP 49152:KENwzIR257BhIqR6FoRvku04YLvbq/XC59:KgwkQ7/IqMe
- TLSH T18BC57D10BB508029FAE352B54ABEE1AC95687DF0879850CBA1D477F95A362F03D33787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_fee30cdb8e9c7950c09d4ab83c665eb4_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_fee30cdb8e9c7950c09d4ab83c665eb4_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_fee30cdb8e9c7950c09d4ab83c665eb4_amadey_elex_remcos_smoke-loader_vidar
- Size 2.5MB
- SHA256 bc7e30e801c64b4b5aee6062326658a811d67d505679c8ae01a5de6b8c9a1e1d
- MD5 fee30cdb8e9c7950c09d4ab83c665eb4
- SHA1 5156427f6dbe92e4dfa58908f61f9e9063efe011
- SHA512 919588b38521d666c9a4876d0e987800161ee8be02c7df0efd5bee87eb9ff6247192f2b67aa93461ac27bba7723f3a3f51b6905bf3ae1549ddc6e7e03b7b9ae3
- SSDEEP 49152:KENwzIR257BhIqR6FoRvku04YLvbq/XC59:KgwkQ7/IqMe
- TLSH T18BC57D10BB508029FAE352B54ABEE1AC95687DF0879850CBA1D477F95A362F03D33787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory