General
- Target 2026-07-23_e94396947b4d6e05478903e44f5f27ea_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260723-pxgefacp7t
- SHA256 1af563735f139477caff16875253fa67c1f0bf2ae6bb029b26645370cd07577d
- MD5 e94396947b4d6e05478903e44f5f27ea
- SHA1 538ef38b36453f44b5f5babd86474134335d8ba6
- SHA512 be406a804c8227e4cce7ec865d2c0f262833cfb5c0a48b49b4508e8e0fabfba1be704532aa2f0ae4751266ac182328aa0ca35752ca04322ddb924a8285e3a9e6
- SSDEEP 24576:TxWVeyRYvv7dF1+nLZWMHS4O8b8ITDnldIqPfF1Y:T8YoS4O8b8ITDnldIgfI
- TLSH T16495C523B3E88617F6F3FB3099B45670AA36BC6DAE75D24E6240331E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_e94396947b4d6e05478903e44f5f27ea_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_e94396947b4d6e05478903e44f5f27ea_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_e94396947b4d6e05478903e44f5f27ea_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 1af563735f139477caff16875253fa67c1f0bf2ae6bb029b26645370cd07577d
- MD5 e94396947b4d6e05478903e44f5f27ea
- SHA1 538ef38b36453f44b5f5babd86474134335d8ba6
- SHA512 be406a804c8227e4cce7ec865d2c0f262833cfb5c0a48b49b4508e8e0fabfba1be704532aa2f0ae4751266ac182328aa0ca35752ca04322ddb924a8285e3a9e6
- SSDEEP 24576:TxWVeyRYvv7dF1+nLZWMHS4O8b8ITDnldIqPfF1Y:T8YoS4O8b8ITDnldIgfI
- TLSH T16495C523B3E88617F6F3FB3099B45670AA36BC6DAE75D24E6240331E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory