General
- Target 2026-08-01_f4044912902d28f14b865afd5b7f102a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260801-svjcsscf67
- SHA256 7b4d81ef7eae81994c6afb1b2b65a7f106793cd17ad46f22fc29d4a567459265
- MD5 f4044912902d28f14b865afd5b7f102a
- SHA1 9b4bdafd73a277909979b134750b01e7ba434fb4
- SHA512 26d370a53bf065a076b449f937f80e5514d31d8769073293c193de880df779386e55a3db84ca480bbd34dfc970def465aa2a71f05941e50fd64537b9a46bec06
- SSDEEP 24576:/xWVeyRYMjUoH4O8b8ITDnl+FPrVZIlD4:/8YY4O8b8ITDnl+FPrn+k
- TLSH T17155732173FD8216F5FB3B309D795AA02A76BC26AE74866E3254370D1B70A50DD2072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f4044912902d28f14b865afd5b7f102a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f4044912902d28f14b865afd5b7f102a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f4044912902d28f14b865afd5b7f102a_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 7b4d81ef7eae81994c6afb1b2b65a7f106793cd17ad46f22fc29d4a567459265
- MD5 f4044912902d28f14b865afd5b7f102a
- SHA1 9b4bdafd73a277909979b134750b01e7ba434fb4
- SHA512 26d370a53bf065a076b449f937f80e5514d31d8769073293c193de880df779386e55a3db84ca480bbd34dfc970def465aa2a71f05941e50fd64537b9a46bec06
- SSDEEP 24576:/xWVeyRYMjUoH4O8b8ITDnl+FPrVZIlD4:/8YY4O8b8ITDnl+FPrn+k
- TLSH T17155732173FD8216F5FB3B309D795AA02A76BC26AE74866E3254370D1B70A50DD2072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory