General
- Target 2026-08-03_010870d15a79593c5a4097cec6c4385d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260804-d7j3ja1enf
- SHA256 7857da9dce409f6d83230ffeae4e13cb41044c16b975dbea6b130c92a1cd4dc5
- MD5 010870d15a79593c5a4097cec6c4385d
- SHA1 fe322c6bf8b39bcd12201faa2192f9fb911f0712
- SHA512 150326c97e13703b4c69e5ca3dd017877f9b059f808742aa82a7cfd7b2bab56de1b3042331c891b9cf6517347005436eb1713d78926290e025c286319a7ed6b4
- SSDEEP 24576:jxWVeyRYR520GBG4O8b8ITDnl4FO3WzGr:j8YXGU4O8b8ITDnl4FBzs
- TLSH T1F695946173F88119F6F26B309EF68BA16927BC615E75C20F7240375E1A31AA1DE21337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_010870d15a79593c5a4097cec6c4385d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_010870d15a79593c5a4097cec6c4385d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_010870d15a79593c5a4097cec6c4385d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 7857da9dce409f6d83230ffeae4e13cb41044c16b975dbea6b130c92a1cd4dc5
- MD5 010870d15a79593c5a4097cec6c4385d
- SHA1 fe322c6bf8b39bcd12201faa2192f9fb911f0712
- SHA512 150326c97e13703b4c69e5ca3dd017877f9b059f808742aa82a7cfd7b2bab56de1b3042331c891b9cf6517347005436eb1713d78926290e025c286319a7ed6b4
- SSDEEP 24576:jxWVeyRYR520GBG4O8b8ITDnl4FO3WzGr:j8YXGU4O8b8ITDnl4FBzs
- TLSH T1F695946173F88119F6F26B309EF68BA16927BC615E75C20F7240375E1A31AA1DE21337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory