General
- Target 2026-08-08_7f694af1eb058889b60ba15803880987_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 787KB
- Sample260808-tcesbshp7x
- SHA256 75b83e9611f724a47316f20754c4bfce925a605d43a4ea54278a97852c21b68c
- MD5 7f694af1eb058889b60ba15803880987
- SHA1 d4b17c3edd7529f11639f83281bf33ba6cad0f99
- SHA512 a8f51000256b2166a8e59eecf79d4ac69babe8bd7d17af53258d418e762bd9442c6d09ab4c9d8fb9158cefcc2e48c684ad1677a5827f7f46b26b19ecdee168f3
- SSDEEP 12288:NwKfOVRo9yRYdY4O8b8ITDnlV07bgSElLR3:NxWVeyRYdY4O8b8ITDnlca3
- TLSH T19305842161DCEABED46BAE38596559A2E9377CD29DE843CB2140BF0DBA313B1CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_7f694af1eb058889b60ba15803880987_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_7f694af1eb058889b60ba15803880987_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_7f694af1eb058889b60ba15803880987_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 787KB
- SHA256 75b83e9611f724a47316f20754c4bfce925a605d43a4ea54278a97852c21b68c
- MD5 7f694af1eb058889b60ba15803880987
- SHA1 d4b17c3edd7529f11639f83281bf33ba6cad0f99
- SHA512 a8f51000256b2166a8e59eecf79d4ac69babe8bd7d17af53258d418e762bd9442c6d09ab4c9d8fb9158cefcc2e48c684ad1677a5827f7f46b26b19ecdee168f3
- SSDEEP 12288:NwKfOVRo9yRYdY4O8b8ITDnlV07bgSElLR3:NxWVeyRYdY4O8b8ITDnlca3
- TLSH T19305842161DCEABED46BAE38596559A2E9377CD29DE843CB2140BF0DBA313B1CC14317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory