General
- Target 2026-08-03_a8ddd4d34064bea9ce26906cce57a591_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260803-vsqefafr7z
- SHA256 534607e6d244676431ff6e17480f9fc3100fe4adc545beba06f0c4438c211017
- MD5 a8ddd4d34064bea9ce26906cce57a591
- SHA1 f28e5fe5492da43756e7d923e6f80a868533ca99
- SHA512 56b3daa8e1254814ae38d96ba6214f38439efcf8924d03675683ffa6a83a88da90973d216b618ed9b8ee93979f4c704b4e9b243339e47d285d6cbfbebe02f6ea
- SSDEEP 12288:PwKfOVRo9yRYzEn4O8b8ITDnlCFF0+EqomHO9Eq+g:PxWVeyRYon4O8b8ITDnlCFUqNZg
- TLSH T144A5842172E4C815F2E627309C768BA429267C119EF88A8B3746FF8F3EF2564DD11716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a8ddd4d34064bea9ce26906cce57a591_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a8ddd4d34064bea9ce26906cce57a591_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a8ddd4d34064bea9ce26906cce57a591_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 534607e6d244676431ff6e17480f9fc3100fe4adc545beba06f0c4438c211017
- MD5 a8ddd4d34064bea9ce26906cce57a591
- SHA1 f28e5fe5492da43756e7d923e6f80a868533ca99
- SHA512 56b3daa8e1254814ae38d96ba6214f38439efcf8924d03675683ffa6a83a88da90973d216b618ed9b8ee93979f4c704b4e9b243339e47d285d6cbfbebe02f6ea
- SSDEEP 12288:PwKfOVRo9yRYzEn4O8b8ITDnlCFF0+EqomHO9Eq+g:PxWVeyRYon4O8b8ITDnlCFUqNZg
- TLSH T144A5842172E4C815F2E627309C768BA429267C119EF88A8B3746FF8F3EF2564DD11716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory