General
- Target 2026-08-06_8c85d5dc0eec37aa1b932e7ad33054a5_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260806-2t8qqssdjf
- SHA256 3c38b639e5a6e9d72a94704a9bc740fc7ceb25ecaf9564d001729ef87874e438
- MD5 8c85d5dc0eec37aa1b932e7ad33054a5
- SHA1 527ed77c61396632a7f9b403429f90a5508fecf8
- SHA512 1767f3c6ecac304edccbc52105eb9c2fe32fb26e73559e44f74a7af9ad2b505709429cae257eb3cedf79479dad177887d30e3975807a1f9d54974cf78c474122
- SSDEEP 24576:VxWVeyRYxH4O8b8ITDnlCFQB2Bv3X3M3X3Ni/C:V8Y94O8b8ITDnlCFQB2BvH3MH37
- TLSH T17165C52173F98116F5F73B749D768AA03A76BC229E75864E3248371D1F70AA0DD2072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_8c85d5dc0eec37aa1b932e7ad33054a5_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_8c85d5dc0eec37aa1b932e7ad33054a5_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_8c85d5dc0eec37aa1b932e7ad33054a5_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 3c38b639e5a6e9d72a94704a9bc740fc7ceb25ecaf9564d001729ef87874e438
- MD5 8c85d5dc0eec37aa1b932e7ad33054a5
- SHA1 527ed77c61396632a7f9b403429f90a5508fecf8
- SHA512 1767f3c6ecac304edccbc52105eb9c2fe32fb26e73559e44f74a7af9ad2b505709429cae257eb3cedf79479dad177887d30e3975807a1f9d54974cf78c474122
- SSDEEP 24576:VxWVeyRYxH4O8b8ITDnlCFQB2Bv3X3M3X3Ni/C:V8Y94O8b8ITDnlCFQB2BvH3MH37
- TLSH T17165C52173F98116F5F73B749D768AA03A76BC229E75864E3248371D1F70AA0DD2072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory