General
- Target 2026-08-05_cabd3d08b8e430256b34e103b4c41ada_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260805-v2v2aasbjb
- SHA256 281189bdb9ddff352a20284889fba3eeb8256cbabe7d2b2e3ffa9e90757b7fa9
- MD5 cabd3d08b8e430256b34e103b4c41ada
- SHA1 bb7721a1609a16917fd0379bd30556415011938c
- SHA512 6bf35f9bd0300fefe80638db171daeea329cbbf0240e845c6bf5a61ca19b175f2e1db585cd8821a7921a49e8b31611950f1836dd9dd914f6a061fb46aa227abf
- SSDEEP 24576:DxWVeyRY+K54O8b8ITDnljFwciPmj4Tr/:D8Y+C4O8b8ITDnljFwciPR
- TLSH T1B6351961B2D4C122E4B63B30D9768EF03A26BC15AEB5864F36447B5E7F316B0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_cabd3d08b8e430256b34e103b4c41ada_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_cabd3d08b8e430256b34e103b4c41ada_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_cabd3d08b8e430256b34e103b4c41ada_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 281189bdb9ddff352a20284889fba3eeb8256cbabe7d2b2e3ffa9e90757b7fa9
- MD5 cabd3d08b8e430256b34e103b4c41ada
- SHA1 bb7721a1609a16917fd0379bd30556415011938c
- SHA512 6bf35f9bd0300fefe80638db171daeea329cbbf0240e845c6bf5a61ca19b175f2e1db585cd8821a7921a49e8b31611950f1836dd9dd914f6a061fb46aa227abf
- SSDEEP 24576:DxWVeyRY+K54O8b8ITDnljFwciPmj4Tr/:D8Y+C4O8b8ITDnljFwciPR
- TLSH T1B6351961B2D4C122E4B63B30D9768EF03A26BC15AEB5864F36447B5E7F316B0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory