General
- Target 2026-08-02_4a90c5f764b7dbe726a9c94a68207445_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260802-xc2hwaec35
- SHA256 01c948a8c70a599f49b1e3802180aba235c886d148edcc3ba730c00e62839fdc
- MD5 4a90c5f764b7dbe726a9c94a68207445
- SHA1 adece16676577e0831b80baf648c64e9664a347f
- SHA512 d2918f57d56d5b862385fc0acf1e674916cc6474d07863f7b93a74c38d99e7029df8225e2c9a34b383ae4abf0c8d5fb70fc211798e8e9c3c5135b1aa6d535b25
- SSDEEP 24576:+xWVeyRYrKVdOi54O8b8ITDnlGFfGZB0Qrg:+8Yi4O8b8ITDnlGFfGZBDg
- TLSH T14795C425B3F88515F2F7BF3099766EA21A36BD229E75824E3204374E2E71750DE20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_4a90c5f764b7dbe726a9c94a68207445_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_4a90c5f764b7dbe726a9c94a68207445_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_4a90c5f764b7dbe726a9c94a68207445_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 01c948a8c70a599f49b1e3802180aba235c886d148edcc3ba730c00e62839fdc
- MD5 4a90c5f764b7dbe726a9c94a68207445
- SHA1 adece16676577e0831b80baf648c64e9664a347f
- SHA512 d2918f57d56d5b862385fc0acf1e674916cc6474d07863f7b93a74c38d99e7029df8225e2c9a34b383ae4abf0c8d5fb70fc211798e8e9c3c5135b1aa6d535b25
- SSDEEP 24576:+xWVeyRYrKVdOi54O8b8ITDnlGFfGZB0Qrg:+8Yi4O8b8ITDnlGFfGZBDg
- TLSH T14795C425B3F88515F2F7BF3099766EA21A36BD229E75824E3204374E2E71750DE20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory