General
- Target 2026-08-18_702418a797e9cdc33b1eea68a238c098_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 914KB
- Sample260818-v9drzaae52
- SHA256 f46aad3fee0f040f05e83db6058915181ae17c90e0daab3f881bd148876d0dc5
- MD5 702418a797e9cdc33b1eea68a238c098
- SHA1 f42440201ac1976392c692fd7028fd70258c6627
- SHA512 61fcb2278048d7346462dbae9d5a6605770db2f704081d58a088385ef5ddd2f6a8c8c5bf529c3be286a1e0446de2e117c730efdc6b9639c3b2d0ff7e6355df50
- SSDEEP 12288:QwKfOVRo9yRYt4O8b8ITDnlKf9fY+wQvzK6:QxWVeyRYt4O8b8ITDnla9fZbK6
- TLSH T11A15C421A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_702418a797e9cdc33b1eea68a238c098_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_702418a797e9cdc33b1eea68a238c098_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_702418a797e9cdc33b1eea68a238c098_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 914KB
- SHA256 f46aad3fee0f040f05e83db6058915181ae17c90e0daab3f881bd148876d0dc5
- MD5 702418a797e9cdc33b1eea68a238c098
- SHA1 f42440201ac1976392c692fd7028fd70258c6627
- SHA512 61fcb2278048d7346462dbae9d5a6605770db2f704081d58a088385ef5ddd2f6a8c8c5bf529c3be286a1e0446de2e117c730efdc6b9639c3b2d0ff7e6355df50
- SSDEEP 12288:QwKfOVRo9yRYt4O8b8ITDnlKf9fY+wQvzK6:QxWVeyRYt4O8b8ITDnla9fZbK6
- TLSH T11A15C421A3E94159F5F33F70D9B54AA0EA377C65ABB5C60E2240370E1A71BA0CD76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory