General
- Target 2026-08-01_de15527aaf2bfa7d5a8bed62727fc89d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.7MB
- Sample260801-xt97cav1ey
- SHA256 78f7485b45bf86ca6adb03f7339cd25f5863534c1eb633e9437d233fac44ee32
- MD5 de15527aaf2bfa7d5a8bed62727fc89d
- SHA1 e7b8044a3e715f9d0de840ef7ed6f5304ae4fcf8
- SHA512 e21356189a246fa842d9da963476091393a20be89ee7a69a15e558bb28661bd90ad18abc94fb42b9da9f54f2b3c78e15e26fd6df91bad7bd12c350b314d26310
- SSDEEP 196608:kr5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki24:g5fxSZBqGqlDgcowGRT
- TLSH T175B60223E3E50221F1FB27719EBA5580AF36BC656A74C71F2158730D1A71AA0DDB2363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_de15527aaf2bfa7d5a8bed62727fc89d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_de15527aaf2bfa7d5a8bed62727fc89d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_de15527aaf2bfa7d5a8bed62727fc89d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 10.7MB
- SHA256 78f7485b45bf86ca6adb03f7339cd25f5863534c1eb633e9437d233fac44ee32
- MD5 de15527aaf2bfa7d5a8bed62727fc89d
- SHA1 e7b8044a3e715f9d0de840ef7ed6f5304ae4fcf8
- SHA512 e21356189a246fa842d9da963476091393a20be89ee7a69a15e558bb28661bd90ad18abc94fb42b9da9f54f2b3c78e15e26fd6df91bad7bd12c350b314d26310
- SSDEEP 196608:kr5fVxdSZB0hGqdPofKsIkzHLqj2L3FCGRbki24:g5fxSZBqGqlDgcowGRT
- TLSH T175B60223E3E50221F1FB27719EBA5580AF36BC656A74C71F2158730D1A71AA0DDB2363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory