General
- Target 2026-08-09_5dae0260c454cb2f49e54242df56cc4e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260809-1n3f4aej5z
- SHA256 33d5636efca2dc5b8b69c056efd249b6ee3eb1cd82b0e0a71f9b028ce2c745fa
- MD5 5dae0260c454cb2f49e54242df56cc4e
- SHA1 64850150b51199a44e17d11433bd5476c62de6d6
- SHA512 3525fb8e7280d7d082a4fa4706ac4cced1639b32930136198f945d4cc2e5b63f35c60a1d8a0d29ce8f6344e235173b5fb8128b2b7379f0e2458ab507cc316756
- SSDEEP 12288:JwKfOVRo9yRYOQ7O4O8b8ITDnlz00BuJaR9FDl:JxWVeyRYOQ7O4O8b8ITDnldoyl
- TLSH T1F435963263E98A14F1F73F7089B45AB066277C116EB9C7CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_5dae0260c454cb2f49e54242df56cc4e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_5dae0260c454cb2f49e54242df56cc4e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_5dae0260c454cb2f49e54242df56cc4e_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 33d5636efca2dc5b8b69c056efd249b6ee3eb1cd82b0e0a71f9b028ce2c745fa
- MD5 5dae0260c454cb2f49e54242df56cc4e
- SHA1 64850150b51199a44e17d11433bd5476c62de6d6
- SHA512 3525fb8e7280d7d082a4fa4706ac4cced1639b32930136198f945d4cc2e5b63f35c60a1d8a0d29ce8f6344e235173b5fb8128b2b7379f0e2458ab507cc316756
- SSDEEP 12288:JwKfOVRo9yRYOQ7O4O8b8ITDnlz00BuJaR9FDl:JxWVeyRYOQ7O4O8b8ITDnldoyl
- TLSH T1F435963263E98A14F1F73F7089B45AB066277C116EB9C7CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory