General
- Target 2026-07-22_06c15d50c271637737d6e4a10a26307f_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260722-ww1j9axtds
- SHA256 496a87f941bcc4cafdb8afd6ef6a4859e22bc50050d5704c9923a8c9ce2f8237
- MD5 06c15d50c271637737d6e4a10a26307f
- SHA1 1cdbf26867b6252f9608828820e55e0d0b99ed02
- SHA512 1f9b455a93196d16cda47043993a1ad2d58e740191d82f8cc347c031decf6524605a8d59e6101d53a6423e7b53ca303500d05a1b609525555dd59478dd307b57
- SSDEEP 12288:WwKfOVRo9yRYnga4O8b8ITDnlA0gmPbyJS/INFOdn/BXwUIq12KQfftHCMF:WxWVeyRYnga4O8b8ITDnltIq8fF1F
- TLSH T16C85B563B3E88217F6F3FB3099B45670AA36BC6DAE74D24E6240335E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_06c15d50c271637737d6e4a10a26307f_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_06c15d50c271637737d6e4a10a26307f_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_06c15d50c271637737d6e4a10a26307f_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 496a87f941bcc4cafdb8afd6ef6a4859e22bc50050d5704c9923a8c9ce2f8237
- MD5 06c15d50c271637737d6e4a10a26307f
- SHA1 1cdbf26867b6252f9608828820e55e0d0b99ed02
- SHA512 1f9b455a93196d16cda47043993a1ad2d58e740191d82f8cc347c031decf6524605a8d59e6101d53a6423e7b53ca303500d05a1b609525555dd59478dd307b57
- SSDEEP 12288:WwKfOVRo9yRYnga4O8b8ITDnlA0gmPbyJS/INFOdn/BXwUIq12KQfftHCMF:WxWVeyRYnga4O8b8ITDnltIq8fF1F
- TLSH T16C85B563B3E88217F6F3FB3099B45670AA36BC6DAE74D24E6240335E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory