General
- Target 2026-07-19_7f921a49c11885dce1d42fe3fccc3b5e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260719-vd71yahx2t
- SHA256 b1938fc635633ba8863ec51ccfc30bb0ef6084f75415ae9e2923ea3754feb842
- MD5 7f921a49c11885dce1d42fe3fccc3b5e
- SHA1 94a559902c390a881ca115c40bd3ff495d6d6a3e
- SHA512 41e326aff64fe6de86a44f50d85984067247d4aa0a5c22047969f6a13ee891cd9eae8077402b11c627d0e723135ae2c7b04c9b68ab2119d25ef07500f56236c2
- SSDEEP 12288:SwKfOVRo9yRYSQ7O4O8b8ITDnlz00BuJaR9FbD:SxWVeyRYSQ7O4O8b8ITDnldoqD
- TLSH T1B235963263E98A14F1F73F708DB45AB066277C116EB9C6CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_7f921a49c11885dce1d42fe3fccc3b5e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_7f921a49c11885dce1d42fe3fccc3b5e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_7f921a49c11885dce1d42fe3fccc3b5e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 b1938fc635633ba8863ec51ccfc30bb0ef6084f75415ae9e2923ea3754feb842
- MD5 7f921a49c11885dce1d42fe3fccc3b5e
- SHA1 94a559902c390a881ca115c40bd3ff495d6d6a3e
- SHA512 41e326aff64fe6de86a44f50d85984067247d4aa0a5c22047969f6a13ee891cd9eae8077402b11c627d0e723135ae2c7b04c9b68ab2119d25ef07500f56236c2
- SSDEEP 12288:SwKfOVRo9yRYSQ7O4O8b8ITDnlz00BuJaR9FbD:SxWVeyRYSQ7O4O8b8ITDnldoqD
- TLSH T1B235963263E98A14F1F73F708DB45AB066277C116EB9C6CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory