General
- Target 2026-07-29_659e3fd0e96a4acc46eb8b83044b5b7d_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260729-waxaps1xas
- SHA256 996b90dbf49bda4ee8c979dc63de362b89d9d30660c0f0a502c7e9050478ad45
- MD5 659e3fd0e96a4acc46eb8b83044b5b7d
- SHA1 b5c8dc6823a613b472ac57744881d3ceb634fcc6
- SHA512 7f3e31666239e0d6345761f2147349d1e363744da00aaec34b5c067a608d9c0840c9228935ebf92ddc3f3a4b57293d45e6ef2e2f325cc2bd4bbc018ce663c36b
- SSDEEP 12288:FwKfOVRo9yRYJaPU4O8b8ITDnlBfSVDTvHKC:FxWVeyRYIPU4O8b8ITDnlhSVvvKC
- TLSH T19C457261A3F94655F2F33F70A9B54A60EA3ABC65AA79C24E1240370E1D71B90CD72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_659e3fd0e96a4acc46eb8b83044b5b7d_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_659e3fd0e96a4acc46eb8b83044b5b7d_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_659e3fd0e96a4acc46eb8b83044b5b7d_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 996b90dbf49bda4ee8c979dc63de362b89d9d30660c0f0a502c7e9050478ad45
- MD5 659e3fd0e96a4acc46eb8b83044b5b7d
- SHA1 b5c8dc6823a613b472ac57744881d3ceb634fcc6
- SHA512 7f3e31666239e0d6345761f2147349d1e363744da00aaec34b5c067a608d9c0840c9228935ebf92ddc3f3a4b57293d45e6ef2e2f325cc2bd4bbc018ce663c36b
- SSDEEP 12288:FwKfOVRo9yRYJaPU4O8b8ITDnlBfSVDTvHKC:FxWVeyRYIPU4O8b8ITDnlhSVvvKC
- TLSH T19C457261A3F94655F2F33F70A9B54A60EA3ABC65AA79C24E1240370E1D71B90CD72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory