General
- Target 2026-07-31_20dcc93980236e4d0142288056338b16_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 945KB
- Sample260731-r77eqavemg
- SHA256 66a31017767b15fdb13495c1f00d049dc8b534a1ff7d7f40fc181ffcd14f6048
- MD5 20dcc93980236e4d0142288056338b16
- SHA1 d3252b025600e055b8c30b04dd061f6b560cd59c
- SHA512 605a97f057db7cfc52c9146c271af7962c990b51294847f27ae9c32a7e98b3e5163b809d1de3cd7a8fc70e31ea4bf51f8ce8f7e8650ccd7fc364ee8d72102fda
- SSDEEP 12288:+wKfOVRo9yRYg4O8b8ITDnlKfywn0Y+wQvi9:+xWVeyRYg4O8b8ITDnlaywn0Za9
- TLSH T1C325C521A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_20dcc93980236e4d0142288056338b16_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_20dcc93980236e4d0142288056338b16_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_20dcc93980236e4d0142288056338b16_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 945KB
- SHA256 66a31017767b15fdb13495c1f00d049dc8b534a1ff7d7f40fc181ffcd14f6048
- MD5 20dcc93980236e4d0142288056338b16
- SHA1 d3252b025600e055b8c30b04dd061f6b560cd59c
- SHA512 605a97f057db7cfc52c9146c271af7962c990b51294847f27ae9c32a7e98b3e5163b809d1de3cd7a8fc70e31ea4bf51f8ce8f7e8650ccd7fc364ee8d72102fda
- SSDEEP 12288:+wKfOVRo9yRYg4O8b8ITDnlKfywn0Y+wQvi9:+xWVeyRYg4O8b8ITDnlaywn0Za9
- TLSH T1C325C521A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory