General
- Target 2026-08-12_6bc77cb7bb2018c994b4405aa8f7e12c_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260813-bb3hwsw1fv
- SHA256 cad99d0452c604aa053a18ca811fdcbc21b910918add488f9e9e7a7284ba7a84
- MD5 6bc77cb7bb2018c994b4405aa8f7e12c
- SHA1 1103dedf476521c5d6956bf399098af15f09f110
- SHA512 69611f941b99a0e61403e1565261ecbc4a6843ff2835595436cbfd289c38fe6d8d4ccc524026d3650ce4bdc6fffe27c4ecb6ff5332d68b394d846b4326f55825
- SSDEEP 12288:iwKfOVRo9yRYWLmg4O8b8ITDnl5U1XcKY:ixWVeyRYWLmg4O8b8ITDnl5KY
- TLSH T16325E622E3E84114F5F33F3099B94A60EA377C516AB5C65E3288374E4E75BA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_6bc77cb7bb2018c994b4405aa8f7e12c_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_6bc77cb7bb2018c994b4405aa8f7e12c_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_6bc77cb7bb2018c994b4405aa8f7e12c_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 cad99d0452c604aa053a18ca811fdcbc21b910918add488f9e9e7a7284ba7a84
- MD5 6bc77cb7bb2018c994b4405aa8f7e12c
- SHA1 1103dedf476521c5d6956bf399098af15f09f110
- SHA512 69611f941b99a0e61403e1565261ecbc4a6843ff2835595436cbfd289c38fe6d8d4ccc524026d3650ce4bdc6fffe27c4ecb6ff5332d68b394d846b4326f55825
- SSDEEP 12288:iwKfOVRo9yRYWLmg4O8b8ITDnl5U1XcKY:ixWVeyRYWLmg4O8b8ITDnl5KY
- TLSH T16325E622E3E84114F5F33F3099B94A60EA377C516AB5C65E3288374E4E75BA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory