General
- Target 2026-08-02_fca980de282d66aeb4f846eebec21e11_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260802-thjy8swdqb
- SHA256 4e64631eee2ccd85073bea1a85183b7a7a934d20a611a04157507143c4979434
- MD5 fca980de282d66aeb4f846eebec21e11
- SHA1 057b7c5f4394428adb97ae2dc61f5076ee7d3140
- SHA512 13c5c28bbf15b7f9762e0e68c148ead0f78d82bcf61da4217597335a68e26fc7b8bd4f2abf177522dc5f829d867e38973d97f9155f5127fd4437554c1f3a8575
- SSDEEP 24576:MxWVeyRY7Q7W4O8b8ITDnldSt7riih88ZOORwEw3A3HI3H73H/n73K3H23Z95:M8YN4O8b8ITDnl0t7riih88ZOOGf
- TLSH T15945962163E85B15F1BB7B7099B459A06A6B7C119EB5C7CF16803F4E3A346E0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_fca980de282d66aeb4f846eebec21e11_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_fca980de282d66aeb4f846eebec21e11_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_fca980de282d66aeb4f846eebec21e11_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 4e64631eee2ccd85073bea1a85183b7a7a934d20a611a04157507143c4979434
- MD5 fca980de282d66aeb4f846eebec21e11
- SHA1 057b7c5f4394428adb97ae2dc61f5076ee7d3140
- SHA512 13c5c28bbf15b7f9762e0e68c148ead0f78d82bcf61da4217597335a68e26fc7b8bd4f2abf177522dc5f829d867e38973d97f9155f5127fd4437554c1f3a8575
- SSDEEP 24576:MxWVeyRY7Q7W4O8b8ITDnldSt7riih88ZOORwEw3A3HI3H73H/n73K3H23Z95:M8YN4O8b8ITDnl0t7riih88ZOOGf
- TLSH T15945962163E85B15F1BB7B7099B459A06A6B7C119EB5C7CF16803F4E3A346E0CD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory