General
- Target 2026-08-07_ced66847a7c692edae6d0382346d6798_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260807-q5jefagb69
- SHA256 d47ccf64540850bd3c284219cae16fcb259aadfa255a750886b22d67598ebea5
- MD5 ced66847a7c692edae6d0382346d6798
- SHA1 56ef6100fe0f5bf4e477af8434aa7c6987a23d73
- SHA512 acfc3e129cca36d33caa3246107fe4f197a5e14559f16ac7de293d67c4d19c1832f028258f5393cd0c669802a430c0d0d4cf4e6a8c5419e7dea6d91c1ca24de1
- SSDEEP 24576:fxWVeyRYjqwzYDteYIpLPLmq4O8b8ITDnlpC72+1+eP:f8Ynl4O8b8ITDnlwy+1+q
- TLSH T18B756E2163E0CE10F2FFAE3048756E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_ced66847a7c692edae6d0382346d6798_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_ced66847a7c692edae6d0382346d6798_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_ced66847a7c692edae6d0382346d6798_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 d47ccf64540850bd3c284219cae16fcb259aadfa255a750886b22d67598ebea5
- MD5 ced66847a7c692edae6d0382346d6798
- SHA1 56ef6100fe0f5bf4e477af8434aa7c6987a23d73
- SHA512 acfc3e129cca36d33caa3246107fe4f197a5e14559f16ac7de293d67c4d19c1832f028258f5393cd0c669802a430c0d0d4cf4e6a8c5419e7dea6d91c1ca24de1
- SSDEEP 24576:fxWVeyRYjqwzYDteYIpLPLmq4O8b8ITDnlpC72+1+eP:f8Ynl4O8b8ITDnlwy+1+q
- TLSH T18B756E2163E0CE10F2FFAE3048756E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory