General
- Target 2026-07-31_65bce1c396ce61b3b7ec2b08ee8b5fe7_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 912KB
- Sample260731-wprc1ay1es
- SHA256 b4e0dd21e5a9b6206a70765739ce917363b6ac95a84e0a5ce849e95dc2659c0f
- MD5 65bce1c396ce61b3b7ec2b08ee8b5fe7
- SHA1 25e022eb3f873df1d3a4c775fd0c2b9063e40474
- SHA512 f28d087ef9a98591e74ee6704b3dce536565127670edbf44b938a26faa2efe6e55e9d657da0d56551fb13438f7f49410a77056b700ed8436d325324ea93e1047
- SSDEEP 12288:owKfOVRo9yRYY4O8b8ITDnlKf9fY+wQvSK+:oxWVeyRYY4O8b8ITDnla9fZ6K+
- TLSH T1AE15C421A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_65bce1c396ce61b3b7ec2b08ee8b5fe7_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_65bce1c396ce61b3b7ec2b08ee8b5fe7_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_65bce1c396ce61b3b7ec2b08ee8b5fe7_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 912KB
- SHA256 b4e0dd21e5a9b6206a70765739ce917363b6ac95a84e0a5ce849e95dc2659c0f
- MD5 65bce1c396ce61b3b7ec2b08ee8b5fe7
- SHA1 25e022eb3f873df1d3a4c775fd0c2b9063e40474
- SHA512 f28d087ef9a98591e74ee6704b3dce536565127670edbf44b938a26faa2efe6e55e9d657da0d56551fb13438f7f49410a77056b700ed8436d325324ea93e1047
- SSDEEP 12288:owKfOVRo9yRYY4O8b8ITDnlKf9fY+wQvSK+:oxWVeyRYY4O8b8ITDnla9fZ6K+
- TLSH T1AE15C421A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory