General
- Target 2026-07-19_bc42f97218e16a498fc194ad80256a7b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260719-xee3nahs8k
- SHA256 16ec6661c4bd92e1bbe71a0af1f835c7269c5bc98837557b2d423c262f95305d
- MD5 bc42f97218e16a498fc194ad80256a7b
- SHA1 4418a1b08b46a328614b22d6715ea67825f6eafa
- SHA512 f5279c88ac6ad9880ab7228b4521e4555f7689848e23d6a9efd71035e85408435690eefb8295d7cba0c92a8dad22ad7e980f29a09d9e4319bb3b60ec330efbc5
- SSDEEP 12288:SwKfOVRo9yRYIQ7O4O8b8ITDnlz00BuJaR9FbD:SxWVeyRYIQ7O4O8b8ITDnldoqD
- TLSH T19635963263E98A14F1F73F708DB45AB066277C116EB9C6CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_bc42f97218e16a498fc194ad80256a7b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_bc42f97218e16a498fc194ad80256a7b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_bc42f97218e16a498fc194ad80256a7b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 16ec6661c4bd92e1bbe71a0af1f835c7269c5bc98837557b2d423c262f95305d
- MD5 bc42f97218e16a498fc194ad80256a7b
- SHA1 4418a1b08b46a328614b22d6715ea67825f6eafa
- SHA512 f5279c88ac6ad9880ab7228b4521e4555f7689848e23d6a9efd71035e85408435690eefb8295d7cba0c92a8dad22ad7e980f29a09d9e4319bb3b60ec330efbc5
- SSDEEP 12288:SwKfOVRo9yRYIQ7O4O8b8ITDnlz00BuJaR9FbD:SxWVeyRYIQ7O4O8b8ITDnldoqD
- TLSH T19635963263E98A14F1F73F708DB45AB066277C116EB9C6CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory