General
- Target 2026-08-02_83e0df8a9da582806f223b8f07d6a523_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260802-wfpg2stzhy
- SHA256 f38ab4843d220bd4728f17d3eedf436616e50956d8a4a73d4706c440baf56de7
- MD5 83e0df8a9da582806f223b8f07d6a523
- SHA1 0e888e9abbd00bba08f5df7fdda6cd64c71abee1
- SHA512 ff1e6388c3704351a6dd92a91d68155079be72f6d751b8eddb6b4aa9d85828c53f032ea3fa6dcb53679620c16da87eed2d0ef6538a760ed84d910865f3ea9fea
- SSDEEP 12288:vwKfOVRo9yRYTa4O8b8ITDnlX0W+X+lVh8dg2:vxWVeyRYTa4O8b8ITDnlH4m2
- TLSH T12B35A72273F84119F5F33B309DB54AA46A66BC616E79C64F3684374E1F70AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_83e0df8a9da582806f223b8f07d6a523_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_83e0df8a9da582806f223b8f07d6a523_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_83e0df8a9da582806f223b8f07d6a523_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 f38ab4843d220bd4728f17d3eedf436616e50956d8a4a73d4706c440baf56de7
- MD5 83e0df8a9da582806f223b8f07d6a523
- SHA1 0e888e9abbd00bba08f5df7fdda6cd64c71abee1
- SHA512 ff1e6388c3704351a6dd92a91d68155079be72f6d751b8eddb6b4aa9d85828c53f032ea3fa6dcb53679620c16da87eed2d0ef6538a760ed84d910865f3ea9fea
- SSDEEP 12288:vwKfOVRo9yRYTa4O8b8ITDnlX0W+X+lVh8dg2:vxWVeyRYTa4O8b8ITDnlH4m2
- TLSH T12B35A72273F84119F5F33B309DB54AA46A66BC616E79C64F3684374E1F70AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory