General
- Target 2026-08-07_2e3c9e707c03b367aa35cef3d821b046_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260807-qdjacswdkc
- SHA256 a3494e73976bacb9ff73f6dce719010005022eb28a723d04bcf17bc10a614fc3
- MD5 2e3c9e707c03b367aa35cef3d821b046
- SHA1 18de84f5869b316cc3da54cda9f9eaf30b00f03a
- SHA512 056a6fd2f63a49a1dac015549848a0ee593bccb6f8e38fe1ef3943efdbc3936200eb3bcaced504cc73bde97eefaf74522634704b888d7582302d960ae7892eb3
- SSDEEP 24576:mxWVeyRYSqwzYDteYIpLPLmz4O8b8ITDnlXkQ1+m:m8Yu44O8b8ITDnlUQ1+m
- TLSH T120756E2163E0CE10F2FFAE3058752E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_2e3c9e707c03b367aa35cef3d821b046_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_2e3c9e707c03b367aa35cef3d821b046_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_2e3c9e707c03b367aa35cef3d821b046_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 a3494e73976bacb9ff73f6dce719010005022eb28a723d04bcf17bc10a614fc3
- MD5 2e3c9e707c03b367aa35cef3d821b046
- SHA1 18de84f5869b316cc3da54cda9f9eaf30b00f03a
- SHA512 056a6fd2f63a49a1dac015549848a0ee593bccb6f8e38fe1ef3943efdbc3936200eb3bcaced504cc73bde97eefaf74522634704b888d7582302d960ae7892eb3
- SSDEEP 24576:mxWVeyRYSqwzYDteYIpLPLmz4O8b8ITDnlXkQ1+m:m8Yu44O8b8ITDnlUQ1+m
- TLSH T120756E2163E0CE10F2FFAE3058752E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory