General
- Target 2026-07-10_fa5dc09437ba159efaa23bfbf4786709_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 681KB
- Sample260710-tf7braex9y
- SHA256 ac4071fb46c29fdc561eeac1ab147fc63dacbdf4d98232307f98c8324ceda9b6
- MD5 fa5dc09437ba159efaa23bfbf4786709
- SHA1 2353d443a542b68f3f3b9352303c7aa9bd32897c
- SHA512 ade021e613c5690ec618cdc664409a7e87c286ebd2c91fd543299035970c6812e64350fee1bf00386cbe461eebdd3b1de2c04818072aec82a7e27a402b278817
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUikX2WH4O8b8ITDnlznZ5QJUEw84ETLaf:TwKfOVRo9yRYCl4O8b8ITDnlr0B4ETuf
- TLSH T1C2E47031B294DE25D5AB3E3489A58EB0EA377C11AEA587CB36403F0D7A717A1DC21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_fa5dc09437ba159efaa23bfbf4786709_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_fa5dc09437ba159efaa23bfbf4786709_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_fa5dc09437ba159efaa23bfbf4786709_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 681KB
- SHA256 ac4071fb46c29fdc561eeac1ab147fc63dacbdf4d98232307f98c8324ceda9b6
- MD5 fa5dc09437ba159efaa23bfbf4786709
- SHA1 2353d443a542b68f3f3b9352303c7aa9bd32897c
- SHA512 ade021e613c5690ec618cdc664409a7e87c286ebd2c91fd543299035970c6812e64350fee1bf00386cbe461eebdd3b1de2c04818072aec82a7e27a402b278817
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUikX2WH4O8b8ITDnlznZ5QJUEw84ETLaf:TwKfOVRo9yRYCl4O8b8ITDnlr0B4ETuf
- TLSH T1C2E47031B294DE25D5AB3E3489A58EB0EA377C11AEA587CB36403F0D7A717A1DC21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory