General
- Target 2026-07-28_85a299e406b5d0eae733957316bf4700_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260728-gdatjsyhma
- SHA256 df16ede25e9f6d12bb95c819244610fc00552797f551a8f451567aabb7da4c84
- MD5 85a299e406b5d0eae733957316bf4700
- SHA1 2b1b371496c0f53522cb579c5b8f65ca8a7c8940
- SHA512 48722fe8168c12b548b5c9ff4c90ad23d5938c0097138fd27a2afcc0d8dfb663bce3cbd1f4327b752149001ce0868a0a28fae8f6fdd5b7494f6b17657490cddc
- SSDEEP 12288:hwKfOVRo9yRYQp4O8b8ITDnlL0jd4dGyCy1VZ88tn:hxWVeyRYi4O8b8ITDnlqWR1Ltn
- TLSH T11435D631B2E48525F4B33B348D768AA02A26FC629EB5C64F3644775E2F316B1CD31726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_85a299e406b5d0eae733957316bf4700_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_85a299e406b5d0eae733957316bf4700_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_85a299e406b5d0eae733957316bf4700_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 df16ede25e9f6d12bb95c819244610fc00552797f551a8f451567aabb7da4c84
- MD5 85a299e406b5d0eae733957316bf4700
- SHA1 2b1b371496c0f53522cb579c5b8f65ca8a7c8940
- SHA512 48722fe8168c12b548b5c9ff4c90ad23d5938c0097138fd27a2afcc0d8dfb663bce3cbd1f4327b752149001ce0868a0a28fae8f6fdd5b7494f6b17657490cddc
- SSDEEP 12288:hwKfOVRo9yRYQp4O8b8ITDnlL0jd4dGyCy1VZ88tn:hxWVeyRYi4O8b8ITDnlqWR1Ltn
- TLSH T11435D631B2E48525F4B33B348D768AA02A26FC629EB5C64F3644775E2F316B1CD31726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory