General
- Target 2026-07-28_230b57f9acf6345a503dff2e8e6e1513_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 955KB
- Sample260729-b22dhstvgs
- SHA256 54f40e7c0f477a8439f3151589e504e56883109b26b99b175eef6693e67ad32d
- MD5 230b57f9acf6345a503dff2e8e6e1513
- SHA1 22dde432a465d8fb825511ee7d6ea2b512a03d11
- SHA512 5ed8f3a15994ff9bdac47168cb72cc08064eeeec6347460ade621fac6e1ce4d28f15f5f2673a71418d3c82f0ae43f09d1b3cdcf082022d6864c67e29bd8a45d0
- SSDEEP 12288:VwKfOVRo9yRYrwQ7O4O8b8ITDnlz0RaM75ULe8/:VxWVeyRY8Q7O4O8b8ITDnloi/
- TLSH T10625A62263E84115F6F33F309EB98AA42A677C656FB5D14F6240375E0A70AA1CD32737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_230b57f9acf6345a503dff2e8e6e1513_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_230b57f9acf6345a503dff2e8e6e1513_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_230b57f9acf6345a503dff2e8e6e1513_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 955KB
- SHA256 54f40e7c0f477a8439f3151589e504e56883109b26b99b175eef6693e67ad32d
- MD5 230b57f9acf6345a503dff2e8e6e1513
- SHA1 22dde432a465d8fb825511ee7d6ea2b512a03d11
- SHA512 5ed8f3a15994ff9bdac47168cb72cc08064eeeec6347460ade621fac6e1ce4d28f15f5f2673a71418d3c82f0ae43f09d1b3cdcf082022d6864c67e29bd8a45d0
- SSDEEP 12288:VwKfOVRo9yRYrwQ7O4O8b8ITDnlz0RaM75ULe8/:VxWVeyRY8Q7O4O8b8ITDnloi/
- TLSH T10625A62263E84115F6F33F309EB98AA42A677C656FB5D14F6240375E0A70AA1CD32737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory