General
- Target 2026-08-02_576fb5d99680d997441a87d53d5f9c32_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260802-rr5k7a1vg1
- SHA256 eca731832385e2c50450d1706a4a3072d305b3009c9723dcae0cbe0ae3c2428b
- MD5 576fb5d99680d997441a87d53d5f9c32
- SHA1 a19bbb45227045aca2be2c5d21bb5621d8d4f0c6
- SHA512 b3a4b8bd146545669aec08dbe41f57aa6fa5ec6acc2929c67ca00e1c49bf6714a13f9b299731279a338c491233a94c30a691fd485fbae9607e6c9153574b515b
- SSDEEP 24576:MxWVeyRYsQ7W4O8b8ITDnldSt7riih88ZOORwEw3A3HI3H73H/n73K3H23Z95:M8Yu4O8b8ITDnl0t7riih88ZOOGf
- TLSH T1C845962163E85B15F1BB7B7099B459A06A6B7C119EB5C7CF16803F4E3A346E0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_576fb5d99680d997441a87d53d5f9c32_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_576fb5d99680d997441a87d53d5f9c32_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_576fb5d99680d997441a87d53d5f9c32_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 eca731832385e2c50450d1706a4a3072d305b3009c9723dcae0cbe0ae3c2428b
- MD5 576fb5d99680d997441a87d53d5f9c32
- SHA1 a19bbb45227045aca2be2c5d21bb5621d8d4f0c6
- SHA512 b3a4b8bd146545669aec08dbe41f57aa6fa5ec6acc2929c67ca00e1c49bf6714a13f9b299731279a338c491233a94c30a691fd485fbae9607e6c9153574b515b
- SSDEEP 24576:MxWVeyRYsQ7W4O8b8ITDnldSt7riih88ZOORwEw3A3HI3H73H/n73K3H23Z95:M8Yu4O8b8ITDnl0t7riih88ZOOGf
- TLSH T1C845962163E85B15F1BB7B7099B459A06A6B7C119EB5C7CF16803F4E3A346E0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory