General
- Target 2026-08-01_c0589039fcdb9661d6c38af19c68244a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260801-tcnegada69
- SHA256 46d71cf902c33227abd6be25ccbe6664fabbad74f3d8dc9d5b53576b94986c7d
- MD5 c0589039fcdb9661d6c38af19c68244a
- SHA1 e42dd9d1453f74f4ae98cb287287b5fe3d146ea0
- SHA512 4d307cead0161600201362218d244f4844db26143690af3350443479fd5cf8b74a0cf73a8f2086a6ed3470069136cf114e73f2c9bbd6b0716aa52e1c6a035c30
- SSDEEP 12288:XwKfOVRo9yRYsNtty4O8b8ITDnljFF0pf0jGQKJmASHJKk3qEbf:XxWVeyRYs1y4O8b8ITDnljFw0jbmXSH
- TLSH T1C655A321B3F98115F5F73B7499764AA02A76BC22DEB5864F3248371D2F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_c0589039fcdb9661d6c38af19c68244a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_c0589039fcdb9661d6c38af19c68244a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_c0589039fcdb9661d6c38af19c68244a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 46d71cf902c33227abd6be25ccbe6664fabbad74f3d8dc9d5b53576b94986c7d
- MD5 c0589039fcdb9661d6c38af19c68244a
- SHA1 e42dd9d1453f74f4ae98cb287287b5fe3d146ea0
- SHA512 4d307cead0161600201362218d244f4844db26143690af3350443479fd5cf8b74a0cf73a8f2086a6ed3470069136cf114e73f2c9bbd6b0716aa52e1c6a035c30
- SSDEEP 12288:XwKfOVRo9yRYsNtty4O8b8ITDnljFF0pf0jGQKJmASHJKk3qEbf:XxWVeyRYs1y4O8b8ITDnljFw0jbmXSH
- TLSH T1C655A321B3F98115F5F73B7499764AA02A76BC22DEB5864F3248371D2F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory