General
- Target 2026-08-16_4fd5072782cd9968a2e43c89769d309b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260816-1b446axycw
- SHA256 65b79a039f2d07884e981668a45cf20f8d72f58e65c66bf38389a1ce22759862
- MD5 4fd5072782cd9968a2e43c89769d309b
- SHA1 9f2a22f47ab51d65e06cf570036e299a25022e10
- SHA512 efbd456a1638f83e79994a6d89f805671fa6d0371ba8739773e9e594aabb2e92c2021a27fc79ff3bfff5ac033c5289742d06c62e56222150159856c0e4ce2546
- SSDEEP 12288:/wKfOVRo9yRYiHJA4O8b8ITDnl+FF0+SQrZIPyPYR1/qsbLk:/xWVeyRYia4O8b8ITDnl+FvrZIlhk
- TLSH T1C255722173F98116F5FB3B709D765AA02A76BC22AE74866E3254370D1F70A60DD2072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_4fd5072782cd9968a2e43c89769d309b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_4fd5072782cd9968a2e43c89769d309b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_4fd5072782cd9968a2e43c89769d309b_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 65b79a039f2d07884e981668a45cf20f8d72f58e65c66bf38389a1ce22759862
- MD5 4fd5072782cd9968a2e43c89769d309b
- SHA1 9f2a22f47ab51d65e06cf570036e299a25022e10
- SHA512 efbd456a1638f83e79994a6d89f805671fa6d0371ba8739773e9e594aabb2e92c2021a27fc79ff3bfff5ac033c5289742d06c62e56222150159856c0e4ce2546
- SSDEEP 12288:/wKfOVRo9yRYiHJA4O8b8ITDnl+FF0+SQrZIPyPYR1/qsbLk:/xWVeyRYia4O8b8ITDnl+FvrZIlhk
- TLSH T1C255722173F98116F5FB3B709D765AA02A76BC22AE74866E3254370D1F70A60DD2072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory