General
- Target 2026-07-31_652b9b9a183927a1b9b9eebb417a5066_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 912KB
- Sample260731-wp25hadm8x
- SHA256 ad8cc864308d142773617492ffd57aabecb170a696fad46004024a8cc7e7f27e
- MD5 652b9b9a183927a1b9b9eebb417a5066
- SHA1 12c17b5b2165f1c760d3cd3e019b27bf60545836
- SHA512 52b301f1d95d777ad83e8f6fcda345d206e0d82c8e2ee61554af00a67b3eed82b7ce1826b584b17133eeba99392a026c67f0c66289fe11d89b01bd0c1cb5c739
- SSDEEP 12288:owKfOVRo9yRYW4O8b8ITDnlKf9fY+wQvSK+:oxWVeyRYW4O8b8ITDnla9fZ6K+
- TLSH T13515C421A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_652b9b9a183927a1b9b9eebb417a5066_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_652b9b9a183927a1b9b9eebb417a5066_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_652b9b9a183927a1b9b9eebb417a5066_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 912KB
- SHA256 ad8cc864308d142773617492ffd57aabecb170a696fad46004024a8cc7e7f27e
- MD5 652b9b9a183927a1b9b9eebb417a5066
- SHA1 12c17b5b2165f1c760d3cd3e019b27bf60545836
- SHA512 52b301f1d95d777ad83e8f6fcda345d206e0d82c8e2ee61554af00a67b3eed82b7ce1826b584b17133eeba99392a026c67f0c66289fe11d89b01bd0c1cb5c739
- SSDEEP 12288:owKfOVRo9yRYW4O8b8ITDnlKf9fY+wQvSK+:oxWVeyRYW4O8b8ITDnla9fZ6K+
- TLSH T13515C421A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory