General
- Target 2026-08-06_859d99be2126c55dbecc8d8ff35dc62b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260806-2wlc8avyfs
- SHA256 038eb333c00d9da7b1e0af860c8f350771e5f9a92436459f46385b8f2ebd1c07
- MD5 859d99be2126c55dbecc8d8ff35dc62b
- SHA1 30189b638afbe046670f0cecc1eed6569ec1e1de
- SHA512 b4857c3196b7e59857c694219f2e2988bba56bf67d4980fb61b2576fb27b5056656bc66dacb56a0410edd9915cfdedb165a181467f10be1cd36d7cca3a820087
- SSDEEP 12288:7wKfOVRo9yRYnQ7O4O8b8ITDnlz0JOqaY3iUvk:7xWVeyRYnQ7O4O8b8ITDnlQI6k
- TLSH T19435B53263E98604F1F73F7099B95AB466277C156F79C6CFA6443B0E6931AA0D821333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_859d99be2126c55dbecc8d8ff35dc62b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_859d99be2126c55dbecc8d8ff35dc62b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_859d99be2126c55dbecc8d8ff35dc62b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 038eb333c00d9da7b1e0af860c8f350771e5f9a92436459f46385b8f2ebd1c07
- MD5 859d99be2126c55dbecc8d8ff35dc62b
- SHA1 30189b638afbe046670f0cecc1eed6569ec1e1de
- SHA512 b4857c3196b7e59857c694219f2e2988bba56bf67d4980fb61b2576fb27b5056656bc66dacb56a0410edd9915cfdedb165a181467f10be1cd36d7cca3a820087
- SSDEEP 12288:7wKfOVRo9yRYnQ7O4O8b8ITDnlz0JOqaY3iUvk:7xWVeyRYnQ7O4O8b8ITDnlQI6k
- TLSH T19435B53263E98604F1F73F7099B95AB466277C156F79C6CFA6443B0E6931AA0D821333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory