General
- Target 2026-07-10_8b687d0d9ff1277819394d960ec24734_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260710-2ak6bse18z
- SHA256 20e92baeb974c76d9c39e9e78d205a515f3ed964c3a59f7e56f1ba818e1b7689
- MD5 8b687d0d9ff1277819394d960ec24734
- SHA1 d5d910710e6dec310ffd7ecadd260295860e0e94
- SHA512 ed524d1bb26952e7a02738efb8b0e4c807ce1d78afed429f7d35a0c1288f68e56fe42c327a5067ab9623da798ad7fcb57a491bc76d954d9efa1e71ea24b4157b
- SSDEEP 24576:4xWVeyRYny4O8b8ITDnljFwmXjmXrrkrdxF33S:48Yy4O8b8ITDnljFwo4IBxFS
- TLSH T194653B62B2D8C025F4B63B348D7A8EA02A26BC155FB5C64F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_8b687d0d9ff1277819394d960ec24734_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8b687d0d9ff1277819394d960ec24734_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8b687d0d9ff1277819394d960ec24734_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 20e92baeb974c76d9c39e9e78d205a515f3ed964c3a59f7e56f1ba818e1b7689
- MD5 8b687d0d9ff1277819394d960ec24734
- SHA1 d5d910710e6dec310ffd7ecadd260295860e0e94
- SHA512 ed524d1bb26952e7a02738efb8b0e4c807ce1d78afed429f7d35a0c1288f68e56fe42c327a5067ab9623da798ad7fcb57a491bc76d954d9efa1e71ea24b4157b
- SSDEEP 24576:4xWVeyRYny4O8b8ITDnljFwmXjmXrrkrdxF33S:48Yy4O8b8ITDnljFwo4IBxFS
- TLSH T194653B62B2D8C025F4B63B348D7A8EA02A26BC155FB5C64F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory