General
- Target 2026-08-06_28bd6bc3a3372ceb6549ced6e5bde497_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.8MB
- Sample260807-bb8pxaxzf1
- SHA256 df1bd97056b449d77439b32591f96c19c2748765cd606a233fd73dc5f34c9870
- MD5 28bd6bc3a3372ceb6549ced6e5bde497
- SHA1 592bab219bcb309f8d56225157c03294d510ac98
- SHA512 f1ba56e7f986816fff40ab563aa8a7639107958cc907b07a0e514c5dc5b56d642a232f37f3896b255db0e3ecd870a206e46f08438c80a355f5143ed0a6c39685
- SSDEEP 12288:WwKfOVRo9yRYDATeB4O8b8ITDnlL0TfBfN7c8xWt:WxWVeyRYD+E4O8b8ITDnlQ5F7xWt
- TLSH T133D5A6E27FE0F164E0E15D353E2AA9BCDA537C759D22828B3283F32D5A36261C915317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_28bd6bc3a3372ceb6549ced6e5bde497_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_28bd6bc3a3372ceb6549ced6e5bde497_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_28bd6bc3a3372ceb6549ced6e5bde497_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.8MB
- SHA256 df1bd97056b449d77439b32591f96c19c2748765cd606a233fd73dc5f34c9870
- MD5 28bd6bc3a3372ceb6549ced6e5bde497
- SHA1 592bab219bcb309f8d56225157c03294d510ac98
- SHA512 f1ba56e7f986816fff40ab563aa8a7639107958cc907b07a0e514c5dc5b56d642a232f37f3896b255db0e3ecd870a206e46f08438c80a355f5143ed0a6c39685
- SSDEEP 12288:WwKfOVRo9yRYDATeB4O8b8ITDnlL0TfBfN7c8xWt:WxWVeyRYD+E4O8b8ITDnlQ5F7xWt
- TLSH T133D5A6E27FE0F164E0E15D353E2AA9BCDA537C759D22828B3283F32D5A36261C915317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory