General
- Target 2026-08-05_e4e2f3e4ef2dd3f1c424f86e46f11453_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 988KB
- Sample260805-vrabtscp2w
- SHA256 ff216c47f65322575cb7b7761085f0e5522ac3a1cad1ab9e32060ed3fffb00bb
- MD5 e4e2f3e4ef2dd3f1c424f86e46f11453
- SHA1 03c7d15ee4f279751c68417eefe413679c379a4f
- SHA512 a629c894605c35bb4fbab12e765cd86401c3afc1f877209eac4818ade9e6e5e38f9d0a736de8c67dee2978e633969030a8d2dee2634e2b26c81a3b1c27994e77
- SSDEEP 24576:ExWVeyRYEK4O8b8ITDnlyPe0bQBEUOnF3oNY:E8YEK4O8b8ITDnlyPeuQBEUOnF4NY
- TLSH T13E250931B640D025E6A13B3409A6CEE43516BC359EF1D64FB5947F2E6F3A5A2DC2330A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e4e2f3e4ef2dd3f1c424f86e46f11453_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e4e2f3e4ef2dd3f1c424f86e46f11453_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e4e2f3e4ef2dd3f1c424f86e46f11453_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 988KB
- SHA256 ff216c47f65322575cb7b7761085f0e5522ac3a1cad1ab9e32060ed3fffb00bb
- MD5 e4e2f3e4ef2dd3f1c424f86e46f11453
- SHA1 03c7d15ee4f279751c68417eefe413679c379a4f
- SHA512 a629c894605c35bb4fbab12e765cd86401c3afc1f877209eac4818ade9e6e5e38f9d0a736de8c67dee2978e633969030a8d2dee2634e2b26c81a3b1c27994e77
- SSDEEP 24576:ExWVeyRYEK4O8b8ITDnlyPe0bQBEUOnF3oNY:E8YEK4O8b8ITDnlyPeuQBEUOnF4NY
- TLSH T13E250931B640D025E6A13B3409A6CEE43516BC359EF1D64FB5947F2E6F3A5A2DC2330A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory