General
- Target 2026-08-08_f9e008d7c183cfe3da623901517e51ac_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260808-fbg96szgre
- SHA256 5d8cc28aab575578778f2728ed13cb92788a914dcaf591a4481404ee80757ad6
- MD5 f9e008d7c183cfe3da623901517e51ac
- SHA1 ab0908b9755d8875ecd5f232f8c9a6d0e8f0a8ad
- SHA512 81c6b978dbec919f69a76d5c946eda7983e894cf8c748b6fb4bae625ec140c044f21f7ccc638a875073dacc9a00e780b331d87ba504adb6b0bbf20f00a8fa72a
- SSDEEP 12288:cwKfOVRo9yRYpA7U4O8b8ITDnlVkq3yoIZo5za:cxWVeyRYpA7U4O8b8ITDnlJ3YIza
- TLSH T19F45972263FD9714F2FB7B709AB44A611A777D52AE78C78E12403B0D2970AA0CD65733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_f9e008d7c183cfe3da623901517e51ac_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_f9e008d7c183cfe3da623901517e51ac_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_f9e008d7c183cfe3da623901517e51ac_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 5d8cc28aab575578778f2728ed13cb92788a914dcaf591a4481404ee80757ad6
- MD5 f9e008d7c183cfe3da623901517e51ac
- SHA1 ab0908b9755d8875ecd5f232f8c9a6d0e8f0a8ad
- SHA512 81c6b978dbec919f69a76d5c946eda7983e894cf8c748b6fb4bae625ec140c044f21f7ccc638a875073dacc9a00e780b331d87ba504adb6b0bbf20f00a8fa72a
- SSDEEP 12288:cwKfOVRo9yRYpA7U4O8b8ITDnlVkq3yoIZo5za:cxWVeyRYpA7U4O8b8ITDnlJ3YIza
- TLSH T19F45972263FD9714F2FB7B709AB44A611A777D52AE78C78E12403B0D2970AA0CD65733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory