General
- Target 2026-07-11_5e1519d7c72857d7306cdf21545ea4a8_amadey_elex_remcos_smoke-loader_stealc_tofsee
- Size 325KB
- Sample260711-ld52xafs5m
- SHA256 39c28f36594946dbfc8a7338774aef6481d016202bc0a8f211a5c594ad00eca8
- MD5 5e1519d7c72857d7306cdf21545ea4a8
- SHA1 1140247034333e1cbca41bab13076cdeff53ee27
- SHA512 3557291c8c56f6a1ee5cc2cd23e71ef93c57853e6af7fcb051e5b1d6bbf490a04d45116027964cec8b55c10a24d99747ec69008d77342927f1fdc62f851d74d9
- SSDEEP 6144:Jp5aKDakpW+oJpNVd3GKwFQkzagSg4scoS0QCfi:Jp5akpW+kNVd3GKgagAVoS0ri
- TLSH T185640820BD7461ABC4A2153C5BAF629217ADA83D8FF081C77ADF471B1D6E5E44233293
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_5e1519d7c72857d7306cdf21545ea4a8_amadey_elex_remcos_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_5e1519d7c72857d7306cdf21545ea4a8_amadey_elex_remcos_smoke-loader_stealc_tofsee
- Size 325KB
- SHA256 39c28f36594946dbfc8a7338774aef6481d016202bc0a8f211a5c594ad00eca8
- MD5 5e1519d7c72857d7306cdf21545ea4a8
- SHA1 1140247034333e1cbca41bab13076cdeff53ee27
- SHA512 3557291c8c56f6a1ee5cc2cd23e71ef93c57853e6af7fcb051e5b1d6bbf490a04d45116027964cec8b55c10a24d99747ec69008d77342927f1fdc62f851d74d9
- SSDEEP 6144:Jp5aKDakpW+oJpNVd3GKwFQkzagSg4scoS0QCfi:Jp5akpW+kNVd3GKgagAVoS0ri
- TLSH T185640820BD7461ABC4A2153C5BAF629217ADA83D8FF081C77ADF471B1D6E5E44233293
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.