General
- Target 2026-08-03_9e27b097559aa3b2400b6a091c560f43_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260803-fgxbaayepd
- SHA256 3130733c6081be798855549995597d91c12771e755c2d38072e2b983b629f9d2
- MD5 9e27b097559aa3b2400b6a091c560f43
- SHA1 94f33b60f63058aad0ad670d86e528326692c08a
- SHA512 1530a6d4328ab2ae8ba4b8d2d2d66d10ba4bff36fe63b4a4a54a1959964517315435995f4d10a84a042191358f3f1aac46337001809ec6cb35882c927ad94bc1
- SSDEEP 24576:RxWVeyRY6Bw7g4O8b8ITDnl8Pe0bQBEUOnWa8LHPsNX:R8Y84O8b8ITDnl8PeuQBEUOnWa8LvsNX
- TLSH T18A35B421A7FC9128F5F3777099B15EA12AB6FC23D6F4894D318437180BB99A0C964B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9e27b097559aa3b2400b6a091c560f43_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_9e27b097559aa3b2400b6a091c560f43_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9e27b097559aa3b2400b6a091c560f43_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 3130733c6081be798855549995597d91c12771e755c2d38072e2b983b629f9d2
- MD5 9e27b097559aa3b2400b6a091c560f43
- SHA1 94f33b60f63058aad0ad670d86e528326692c08a
- SHA512 1530a6d4328ab2ae8ba4b8d2d2d66d10ba4bff36fe63b4a4a54a1959964517315435995f4d10a84a042191358f3f1aac46337001809ec6cb35882c927ad94bc1
- SSDEEP 24576:RxWVeyRY6Bw7g4O8b8ITDnl8Pe0bQBEUOnWa8LHPsNX:R8Y84O8b8ITDnl8PeuQBEUOnWa8LvsNX
- TLSH T18A35B421A7FC9128F5F3777099B15EA12AB6FC23D6F4894D318437180BB99A0C964B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory