General
- Target 2026-08-04_df5bb212f9f47f98eec85b7ad3caf4d4_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260804-wevbxabj71
- SHA256 8c510837d049d2c58625bf3e34cf67c575e9e24d8f46e570333269855a4c1ae0
- MD5 df5bb212f9f47f98eec85b7ad3caf4d4
- SHA1 2c8740b2f0cd8cf6e2f06368fd3d52525c6a7d24
- SHA512 cda87e649e1960723346029f5fca6911a09a8fb50dfbd74cb53f9b1eb75079c54839042f6b43830b9d87a722fd87ba35e466110bce08e1513ad4ceff9f664915
- SSDEEP 24576:pxWVeyRYfK4O8b8ITDnlQPe0bQBEUOnDKNT:p8YS4O8b8ITDnlQPeuQBEUOnDKNT
- TLSH T169457323B7E99117F5F3FB3059B549B02A267C6DAEF5C54E3280374E0A35AA0C961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_df5bb212f9f47f98eec85b7ad3caf4d4_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_df5bb212f9f47f98eec85b7ad3caf4d4_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_df5bb212f9f47f98eec85b7ad3caf4d4_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 8c510837d049d2c58625bf3e34cf67c575e9e24d8f46e570333269855a4c1ae0
- MD5 df5bb212f9f47f98eec85b7ad3caf4d4
- SHA1 2c8740b2f0cd8cf6e2f06368fd3d52525c6a7d24
- SHA512 cda87e649e1960723346029f5fca6911a09a8fb50dfbd74cb53f9b1eb75079c54839042f6b43830b9d87a722fd87ba35e466110bce08e1513ad4ceff9f664915
- SSDEEP 24576:pxWVeyRYfK4O8b8ITDnlQPe0bQBEUOnDKNT:p8YS4O8b8ITDnlQPeuQBEUOnDKNT
- TLSH T169457323B7E99117F5F3FB3059B549B02A267C6DAEF5C54E3280374E0A35AA0C961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory