General
- Target 2026-09-08_f1597eb860c8082d812f70b75dbc6b26_amadey_elex_mafia_remcos_smoke-loader
- Size 2.9MB
- Sample260908-mmscvayarh
- SHA256 2de665a49f5f07ce637236b9922fdac7cd9abe6257aa574a0c31d79f53b992a4
- MD5 f1597eb860c8082d812f70b75dbc6b26
- SHA1 6bdd3fcb4131438d90f9ac0cf4cffe866eec5eb0
- SHA512 7cb540b3e972d1fcbf1ed9a402f8483831120ddfdff3c5dad858a7c162855fa88d1fac56a5bffaa629f59dc746a158df3f2dcf2925eda9899fba6bf9de7e4c02
- SSDEEP 49152:GOfMUl/QtrWofPEaCp01a9Ac7V+o40s+suTjvHSFEy++EzR7/i5gn:7MprWstC19N7VH3TbHSFp+DRn
- TLSH T12CD5D011B641CC36E8D302348275877B956DE9608FA2D2C7F7D8696E5FA26C1BB3430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_f1597eb860c8082d812f70b75dbc6b26_amadey_elex_mafia_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_f1597eb860c8082d812f70b75dbc6b26_amadey_elex_mafia_remcos_smoke-loader
- Size 2.9MB
- SHA256 2de665a49f5f07ce637236b9922fdac7cd9abe6257aa574a0c31d79f53b992a4
- MD5 f1597eb860c8082d812f70b75dbc6b26
- SHA1 6bdd3fcb4131438d90f9ac0cf4cffe866eec5eb0
- SHA512 7cb540b3e972d1fcbf1ed9a402f8483831120ddfdff3c5dad858a7c162855fa88d1fac56a5bffaa629f59dc746a158df3f2dcf2925eda9899fba6bf9de7e4c02
- SSDEEP 49152:GOfMUl/QtrWofPEaCp01a9Ac7V+o40s+suTjvHSFEy++EzR7/i5gn:7MprWstC19N7VH3TbHSFp+DRn
- TLSH T12CD5D011B641CC36E8D302348275877B956DE9608FA2D2C7F7D8696E5FA26C1BB3430B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1