General
- Target 2026-08-08_90ce141dbc20ec60a4bc03ba32a681ca_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260808-fg975s1ajf
- SHA256 6049e4a0e242895a9e2ac3da337eb7a2070d4c9c8e8566ae53719b6380d5adf0
- MD5 90ce141dbc20ec60a4bc03ba32a681ca
- SHA1 94a0641c08ab63aeedf3a0fdb61b71ee959e2bc5
- SHA512 0f6ad15e102048164d1ea17a7164145c86553f355d10592e5f6ba598faa159d4e075a9ed0da13e258b284246cc1292fa3d392c12460a26945cac2a23bc778fb7
- SSDEEP 12288:JwKfOVRo9yRY3c4O8b8ITDnljFF0uWV5DaHJKkEqEbu:JxWVeyRY3c4O8b8ITDnljFS5Da3
- TLSH T12745932173F98115F5F73B709D768AA02A76BC22DEB5864E32483B5D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_90ce141dbc20ec60a4bc03ba32a681ca_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_90ce141dbc20ec60a4bc03ba32a681ca_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_90ce141dbc20ec60a4bc03ba32a681ca_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 6049e4a0e242895a9e2ac3da337eb7a2070d4c9c8e8566ae53719b6380d5adf0
- MD5 90ce141dbc20ec60a4bc03ba32a681ca
- SHA1 94a0641c08ab63aeedf3a0fdb61b71ee959e2bc5
- SHA512 0f6ad15e102048164d1ea17a7164145c86553f355d10592e5f6ba598faa159d4e075a9ed0da13e258b284246cc1292fa3d392c12460a26945cac2a23bc778fb7
- SSDEEP 12288:JwKfOVRo9yRY3c4O8b8ITDnljFF0uWV5DaHJKkEqEbu:JxWVeyRY3c4O8b8ITDnljFS5Da3
- TLSH T12745932173F98115F5F73B709D768AA02A76BC22DEB5864E32483B5D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory