General
- Target 2026-08-08_875de3c18d8d4cda1ba3c16abfd15dc6_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 786KB
- Sample260808-tbcxcahp6y
- SHA256 a10e5453a3a624bb4a8d8f59b6330d45e6e55b80d27d63991a6380e316f5cef5
- MD5 875de3c18d8d4cda1ba3c16abfd15dc6
- SHA1 b488afda66b8b0c8b526fa7e552872f087242211
- SHA512 81321a09a9d9b53129535bcc32bbb020c8f9c023a2ffba5d770b7d8fcfc1abb2fbce65ac526ef0d37148907365e584eaf6b2c4670b69b4eb666e92e1ed22fcda
- SSDEEP 12288:ywKfOVRo9yRYYs4O8b8ITDnlV07bgSElLMC:yxWVeyRYf4O8b8ITDnlc/C
- TLSH T14E05842161DCEABED46BAE38596559A2E9377CD29DE843CB2140BF0DBA313B1CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_875de3c18d8d4cda1ba3c16abfd15dc6_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_875de3c18d8d4cda1ba3c16abfd15dc6_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_875de3c18d8d4cda1ba3c16abfd15dc6_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 786KB
- SHA256 a10e5453a3a624bb4a8d8f59b6330d45e6e55b80d27d63991a6380e316f5cef5
- MD5 875de3c18d8d4cda1ba3c16abfd15dc6
- SHA1 b488afda66b8b0c8b526fa7e552872f087242211
- SHA512 81321a09a9d9b53129535bcc32bbb020c8f9c023a2ffba5d770b7d8fcfc1abb2fbce65ac526ef0d37148907365e584eaf6b2c4670b69b4eb666e92e1ed22fcda
- SSDEEP 12288:ywKfOVRo9yRYYs4O8b8ITDnlV07bgSElLMC:yxWVeyRYf4O8b8ITDnlc/C
- TLSH T14E05842161DCEABED46BAE38596559A2E9377CD29DE843CB2140BF0DBA313B1CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory