General
- Target 2026-08-05_88e76ea1f82d73287db8fbb3ddfd1f92_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260805-ghggwsec79
- SHA256 ac5906aa3f328676aab3ac6084359b8d2749ccd96601d0cd9dbcd771b9487902
- MD5 88e76ea1f82d73287db8fbb3ddfd1f92
- SHA1 d55a589afb5cdbcc0c2d6933bff9a192c8f48e7d
- SHA512 c567ecf09e8c54585816e1fab701587e96ba50801ad0c91977b66847bc480f2f4fc6379c2e864c89cfac75f38b53f4cefac35bcf9f2c61d60bd38137754b30e0
- SSDEEP 24576:qxWVeyRYnL7F4O8b8ITDnlpDqVKFALb6uNVs+Wn:q8Yl4O8b8ITDnlpDqQFA/6uNu+Q
- TLSH T1AA35952263FE9115F2F7777499B04F611E77BCA39AB8854E2248371D4BB09B0CA64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_88e76ea1f82d73287db8fbb3ddfd1f92_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_88e76ea1f82d73287db8fbb3ddfd1f92_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_88e76ea1f82d73287db8fbb3ddfd1f92_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 ac5906aa3f328676aab3ac6084359b8d2749ccd96601d0cd9dbcd771b9487902
- MD5 88e76ea1f82d73287db8fbb3ddfd1f92
- SHA1 d55a589afb5cdbcc0c2d6933bff9a192c8f48e7d
- SHA512 c567ecf09e8c54585816e1fab701587e96ba50801ad0c91977b66847bc480f2f4fc6379c2e864c89cfac75f38b53f4cefac35bcf9f2c61d60bd38137754b30e0
- SSDEEP 24576:qxWVeyRYnL7F4O8b8ITDnlpDqVKFALb6uNVs+Wn:q8Yl4O8b8ITDnlpDqQFA/6uNu+Q
- TLSH T1AA35952263FE9115F2F7777499B04F611E77BCA39AB8854E2248371D4BB09B0CA64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory