General
- Target 2026-08-02_844a71e4ed8e1b2e6148b237d6ab0c6a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260802-gnf4baea23
- SHA256 6ca3c7dbd9bac36b99d6c3cc8a7d6c40449061bad8227e55345c4a1abba00eb5
- MD5 844a71e4ed8e1b2e6148b237d6ab0c6a
- SHA1 0a4aa6a49c885557e0d79e395b024480f2ebd0fa
- SHA512 c162a21d83b0ae7d69dd41f5b74bf57473bee3107d8e24d45a8d54c7f9cc9397241ff853f597f4e0d16cf8c83bd57ee71272f6bd48dce7468a739ba7304353bc
- SSDEEP 12288:bwKfOVRo9yRYl4O8b8ITDnlvCle2ezsH5M4N:bxWVeyRYl4O8b8ITDnlveZM4N
- TLSH T1E345942263FD9119F6F37F709AB44A61EA77BC62AA79C54E1240334E0970BA0CD65733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_844a71e4ed8e1b2e6148b237d6ab0c6a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_844a71e4ed8e1b2e6148b237d6ab0c6a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_844a71e4ed8e1b2e6148b237d6ab0c6a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 6ca3c7dbd9bac36b99d6c3cc8a7d6c40449061bad8227e55345c4a1abba00eb5
- MD5 844a71e4ed8e1b2e6148b237d6ab0c6a
- SHA1 0a4aa6a49c885557e0d79e395b024480f2ebd0fa
- SHA512 c162a21d83b0ae7d69dd41f5b74bf57473bee3107d8e24d45a8d54c7f9cc9397241ff853f597f4e0d16cf8c83bd57ee71272f6bd48dce7468a739ba7304353bc
- SSDEEP 12288:bwKfOVRo9yRYl4O8b8ITDnlvCle2ezsH5M4N:bxWVeyRYl4O8b8ITDnlveZM4N
- TLSH T1E345942263FD9119F6F37F709AB44A61EA77BC62AA79C54E1240334E0970BA0CD65733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory