General
- Target 2026-07-19_46c3ea05e979f9d18174e3bf6892463a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260719-2r2veaex3l
- SHA256 0ddfe9990cfcecec081f486d77ad346542b499f546ff1cf20810d888728192b9
- MD5 46c3ea05e979f9d18174e3bf6892463a
- SHA1 842ece4135efce1994100ff160379a5f87d6473e
- SHA512 7d42cebd5e4357553ff2540dd138aa53c32fc68354350544a3b7474808bf64bb640b68c309bcd93750c5eccb84e5aac8289c5584c90ba68c7828b8cfd6b44a4a
- SSDEEP 12288:ywKfOVRo9yRYLHa4O8b8ITDnlA0gmPbyJS/INFOdn/BXwYIq12KQfftHCM2:yxWVeyRY7a4O8b8ITDnlBIq8fF12
- TLSH T11185B563B3E88617F6F3FB3099B45670AA36BC6DAE74D24E6240331E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_46c3ea05e979f9d18174e3bf6892463a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_46c3ea05e979f9d18174e3bf6892463a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_46c3ea05e979f9d18174e3bf6892463a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 0ddfe9990cfcecec081f486d77ad346542b499f546ff1cf20810d888728192b9
- MD5 46c3ea05e979f9d18174e3bf6892463a
- SHA1 842ece4135efce1994100ff160379a5f87d6473e
- SHA512 7d42cebd5e4357553ff2540dd138aa53c32fc68354350544a3b7474808bf64bb640b68c309bcd93750c5eccb84e5aac8289c5584c90ba68c7828b8cfd6b44a4a
- SSDEEP 12288:ywKfOVRo9yRYLHa4O8b8ITDnlA0gmPbyJS/INFOdn/BXwYIq12KQfftHCM2:yxWVeyRY7a4O8b8ITDnlBIq8fF12
- TLSH T11185B563B3E88617F6F3FB3099B45670AA36BC6DAE74D24E6240331E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory