General
- Target 2026-08-07_5fbc228c6d1c0e8d246ec3776f587408_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260807-thmp5agp4w
- SHA256 ae9c23f29ebde7ee1710924b83982c3df9992f375a31e82cc61fa32ca7f32e3d
- MD5 5fbc228c6d1c0e8d246ec3776f587408
- SHA1 331fefc456e8bae7be8c04b14b4e91773e312eed
- SHA512 2907410e10b9f817860ab51ca9fef4c60f209b072b436601439b4ee39d7a8a76680658539b096ce727a6bd8f751066d8168b61f0df60b8db880de568e662927a
- SSDEEP 12288:0wKfOVRo9yRYfec4O8b8ITDnl10VX1GoFttd:0xWVeyRYmc4O8b8ITDnlultd
- TLSH T1F865962177E4D515F2F33B309DB54AA42A267C116EF5C64F2342B74F2AB1AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_5fbc228c6d1c0e8d246ec3776f587408_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_5fbc228c6d1c0e8d246ec3776f587408_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_5fbc228c6d1c0e8d246ec3776f587408_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 ae9c23f29ebde7ee1710924b83982c3df9992f375a31e82cc61fa32ca7f32e3d
- MD5 5fbc228c6d1c0e8d246ec3776f587408
- SHA1 331fefc456e8bae7be8c04b14b4e91773e312eed
- SHA512 2907410e10b9f817860ab51ca9fef4c60f209b072b436601439b4ee39d7a8a76680658539b096ce727a6bd8f751066d8168b61f0df60b8db880de568e662927a
- SSDEEP 12288:0wKfOVRo9yRYfec4O8b8ITDnl10VX1GoFttd:0xWVeyRYmc4O8b8ITDnlultd
- TLSH T1F865962177E4D515F2F33B309DB54AA42A267C116EF5C64F2342B74F2AB1AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory