General
- Target 2026-08-09_21af8998e7cc180eaea55d2707f279ff_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260809-1q284szsev
- SHA256 5ea083d707f9de333f806b98c8453eddbd80815228169a6cc8f704888627d49a
- MD5 21af8998e7cc180eaea55d2707f279ff
- SHA1 d41d0b2072b1e1da9871ca7fcb7092e3a1131cd8
- SHA512 e41765ef4f1bdc3505967196e101fba1c69c6ca7610610f7934096ffc74f8a5bf17ba6c6da80b3e154b1b0181d41f0001460050f61624780cce4cc2cdb16ac16
- SSDEEP 12288:JwKfOVRo9yRYDQ7O4O8b8ITDnlz00BuJaR9FDl:JxWVeyRYDQ7O4O8b8ITDnldoyl
- TLSH T17A35963263E98A14F1F73F7089B45AB066277C116EB9C7CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_21af8998e7cc180eaea55d2707f279ff_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_21af8998e7cc180eaea55d2707f279ff_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_21af8998e7cc180eaea55d2707f279ff_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 5ea083d707f9de333f806b98c8453eddbd80815228169a6cc8f704888627d49a
- MD5 21af8998e7cc180eaea55d2707f279ff
- SHA1 d41d0b2072b1e1da9871ca7fcb7092e3a1131cd8
- SHA512 e41765ef4f1bdc3505967196e101fba1c69c6ca7610610f7934096ffc74f8a5bf17ba6c6da80b3e154b1b0181d41f0001460050f61624780cce4cc2cdb16ac16
- SSDEEP 12288:JwKfOVRo9yRYDQ7O4O8b8ITDnlz00BuJaR9FDl:JxWVeyRYDQ7O4O8b8ITDnldoyl
- TLSH T17A35963263E98A14F1F73F7089B45AB066277C116EB9C7CFA5443B0E6931BA0D961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory