General
- Target 2026-08-08_f7909e869b2105f51f4eede32cb358d5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260808-fbkqaszgrg
- SHA256 c4d06c117811d7b0b46a23e0f7ccfb1fca01bcd7d02da9cbd417626727c0919c
- MD5 f7909e869b2105f51f4eede32cb358d5
- SHA1 17bab659575650909202d9a19c2dd8b68f66cd2f
- SHA512 bbb339bcf74b5954acfe24a5fee82649cf55c29badff9e5781a14a17f7d04aeb93d1870f2aa8e7e84284fff9a8e556070f6ec51b17f0f67b504aa4c91e30cfb5
- SSDEEP 49152:k8Yw4O8b8ITDnl5Fc1m2xM1MQ6xKF+LWngB7GFM/K2H3:Nyc1m2u65ysWngBSu/H3
- TLSH T14506E423DFB58414D0629F35C82369A029333D5987A95A0F1AA4B63F4EF37426E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_f7909e869b2105f51f4eede32cb358d5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_f7909e869b2105f51f4eede32cb358d5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_f7909e869b2105f51f4eede32cb358d5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 c4d06c117811d7b0b46a23e0f7ccfb1fca01bcd7d02da9cbd417626727c0919c
- MD5 f7909e869b2105f51f4eede32cb358d5
- SHA1 17bab659575650909202d9a19c2dd8b68f66cd2f
- SHA512 bbb339bcf74b5954acfe24a5fee82649cf55c29badff9e5781a14a17f7d04aeb93d1870f2aa8e7e84284fff9a8e556070f6ec51b17f0f67b504aa4c91e30cfb5
- SSDEEP 49152:k8Yw4O8b8ITDnl5Fc1m2xM1MQ6xKF+LWngB7GFM/K2H3:Nyc1m2u65ysWngBSu/H3
- TLSH T14506E423DFB58414D0629F35C82369A029333D5987A95A0F1AA4B63F4EF37426E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory