General
- Target 2026-08-07_0dbb0552c771a4172f7e23acf6254895_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260807-v9a13shb92
- SHA256 39f520871a074094478d6737d7782fc6db9e9505afc9313c9c7ca9ea2c47804b
- MD5 0dbb0552c771a4172f7e23acf6254895
- SHA1 db6a07426ba4f77a3ff62dc08a8120200f366250
- SHA512 e99d9bf3aea7adc0960e3db4a2c3c4b38185affee8b18e25dc615665a7d1103248f3a9f3f780bc71159d77537c2b89743ad3b46a5c859d2fa5d3815105d68630
- SSDEEP 24576:+xWVeyRYsqwzYDteYIpLPLmz4O8b8ITDnlXkQ1+a:+8Yk44O8b8ITDnlUQ1+a
- TLSH T13A756E2163E0CE10F2FFAE3058752E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_0dbb0552c771a4172f7e23acf6254895_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_0dbb0552c771a4172f7e23acf6254895_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_0dbb0552c771a4172f7e23acf6254895_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 39f520871a074094478d6737d7782fc6db9e9505afc9313c9c7ca9ea2c47804b
- MD5 0dbb0552c771a4172f7e23acf6254895
- SHA1 db6a07426ba4f77a3ff62dc08a8120200f366250
- SHA512 e99d9bf3aea7adc0960e3db4a2c3c4b38185affee8b18e25dc615665a7d1103248f3a9f3f780bc71159d77537c2b89743ad3b46a5c859d2fa5d3815105d68630
- SSDEEP 24576:+xWVeyRYsqwzYDteYIpLPLmz4O8b8ITDnlXkQ1+a:+8Yk44O8b8ITDnlUQ1+a
- TLSH T13A756E2163E0CE10F2FFAE3058752E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory