General
- Target 2026-08-18_a18c489e0e5efafc19840a8f8b4e2e34_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260818-vq7wpsel8w
- SHA256 4d0bac022c31262aaf9dc3a6e5b6b41440d2c44612af3519945a5c016b357b9f
- MD5 a18c489e0e5efafc19840a8f8b4e2e34
- SHA1 3b18e40489550a9f631b301fc7a47b99a243e62e
- SHA512 04630c26063f4c58d3832e5df132f065293f3691857a2ca95a6b402172de0bad380347d4b68d877d82ebc1c320ca109ab7660bbb4dba22a2884b095e79d037c7
- SSDEEP 12288:1wKfOVRo9yRYaty4O8b8ITDnl+FF0o2NaS3mXFaZIPyPYR1AqKbL0:1xWVeyRYao4O8b8ITDnl+FbIZIlg0
- TLSH T15F75B321B3F98116F5FB7B709D765AA02A76BC22AE74C61E3254374D1E70A60CD2072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_a18c489e0e5efafc19840a8f8b4e2e34_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a18c489e0e5efafc19840a8f8b4e2e34_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a18c489e0e5efafc19840a8f8b4e2e34_amadey_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 4d0bac022c31262aaf9dc3a6e5b6b41440d2c44612af3519945a5c016b357b9f
- MD5 a18c489e0e5efafc19840a8f8b4e2e34
- SHA1 3b18e40489550a9f631b301fc7a47b99a243e62e
- SHA512 04630c26063f4c58d3832e5df132f065293f3691857a2ca95a6b402172de0bad380347d4b68d877d82ebc1c320ca109ab7660bbb4dba22a2884b095e79d037c7
- SSDEEP 12288:1wKfOVRo9yRYaty4O8b8ITDnl+FF0o2NaS3mXFaZIPyPYR1AqKbL0:1xWVeyRYao4O8b8ITDnl+FbIZIlg0
- TLSH T15F75B321B3F98116F5FB7B709D765AA02A76BC22AE74C61E3254374D1E70A60CD2072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory