General
- Target 2026-08-03_a70df39b5f72e39f66bf1cb0ef59d0c6_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260803-ffls6acb96
- SHA256 75a1dfd042e1ef2debbce775ca833f7a31e27b25b11b360ba35319abb4491573
- MD5 a70df39b5f72e39f66bf1cb0ef59d0c6
- SHA1 5c5642dbb2f93792720b90f6585110b8de90733a
- SHA512 fdd7077486919c6f5f62ef321b64f4e23a46f368cd65f012ff895d6ad64d7711bd15a1f5ad84ed1ab16040857624f8ebe2501719f7b6f6f7df2139da2cef7570
- SSDEEP 12288:uwKfOVRo9yRYOLOcSN4O8b8ITDnlnFF0lQUsNGHVHWHJKkwqAbA:uxWVeyRYOKcSN4O8b8ITDnlnFdXAVW1
- TLSH T1D875A412B3F98119F5F37B709D754AA01B76BC62AE79C60E3244374E1BB0AA0D921737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a70df39b5f72e39f66bf1cb0ef59d0c6_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a70df39b5f72e39f66bf1cb0ef59d0c6_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a70df39b5f72e39f66bf1cb0ef59d0c6_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 75a1dfd042e1ef2debbce775ca833f7a31e27b25b11b360ba35319abb4491573
- MD5 a70df39b5f72e39f66bf1cb0ef59d0c6
- SHA1 5c5642dbb2f93792720b90f6585110b8de90733a
- SHA512 fdd7077486919c6f5f62ef321b64f4e23a46f368cd65f012ff895d6ad64d7711bd15a1f5ad84ed1ab16040857624f8ebe2501719f7b6f6f7df2139da2cef7570
- SSDEEP 12288:uwKfOVRo9yRYOLOcSN4O8b8ITDnlnFF0lQUsNGHVHWHJKkwqAbA:uxWVeyRYOKcSN4O8b8ITDnlnFdXAVW1
- TLSH T1D875A412B3F98119F5F37B709D754AA01B76BC62AE79C60E3244374E1BB0AA0D921737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory