General
- Target 2026-08-06_839eaa729c492c4d10b5be123354a04b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.7MB
- Sample260806-2w2p7ssdnd
- SHA256 73bbed6f869730b998157b196887aa043d194d784b228b920f47b84b8c547d93
- MD5 839eaa729c492c4d10b5be123354a04b
- SHA1 5363799e92455a6c61eb296cb59d59cecdc798fd
- SHA512 acf611afe4f2f81bc9e9253d5ba26b9b29afd7e175a818b71b72a68eb1b670671d0aa1c20cb165038a93ce22b9f0c010445bd4b104d01735556d2060a61a7407
- SSDEEP 49152:y8YT4O8b8ITDnl0FRGD1YdaiSR7Xgo4TiRPnLWvJBS:nP1y+R7Xn4TiRCvJ4
- TLSH T1A3D52A2267FCC616F1F77B70D9754AA42A27BC52AEF4864F12403F0E6970660E921B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_839eaa729c492c4d10b5be123354a04b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_839eaa729c492c4d10b5be123354a04b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_839eaa729c492c4d10b5be123354a04b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.7MB
- SHA256 73bbed6f869730b998157b196887aa043d194d784b228b920f47b84b8c547d93
- MD5 839eaa729c492c4d10b5be123354a04b
- SHA1 5363799e92455a6c61eb296cb59d59cecdc798fd
- SHA512 acf611afe4f2f81bc9e9253d5ba26b9b29afd7e175a818b71b72a68eb1b670671d0aa1c20cb165038a93ce22b9f0c010445bd4b104d01735556d2060a61a7407
- SSDEEP 49152:y8YT4O8b8ITDnl0FRGD1YdaiSR7Xgo4TiRPnLWvJBS:nP1y+R7Xn4TiRCvJ4
- TLSH T1A3D52A2267FCC616F1F77B70D9754AA42A27BC52AEF4864F12403F0E6970660E921B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory