General
- Target 2026-08-08_8d1b048bc25e16c76eb35affa2216272_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260808-fhrgestxa1
- SHA256 c47be71edf9c2b09603f428d25027a0dd4f64a43178fad9fe831f88b669c1705
- MD5 8d1b048bc25e16c76eb35affa2216272
- SHA1 269ad1584d9227f88c383232aecce6cffad33a43
- SHA512 e39738665a69c5b73614c03fdf9010210197389d35a013bee9359c892f2744959925b1e62c0159e9301bbc1121af5ca6a008d1ebd547539fa17c2e9e250aa421
- SSDEEP 12288:QwKfOVRo9yRYQAc4O8b8ITDnl5FF0/WV5CmiIKkEqybF:QxWVeyRYQAc4O8b8ITDnl5FP5Cmy
- TLSH T1DB45932173F98115F5F73B709D768AA02A76FC229EB5864E32487B5D1F70AA0CD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8d1b048bc25e16c76eb35affa2216272_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8d1b048bc25e16c76eb35affa2216272_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8d1b048bc25e16c76eb35affa2216272_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 c47be71edf9c2b09603f428d25027a0dd4f64a43178fad9fe831f88b669c1705
- MD5 8d1b048bc25e16c76eb35affa2216272
- SHA1 269ad1584d9227f88c383232aecce6cffad33a43
- SHA512 e39738665a69c5b73614c03fdf9010210197389d35a013bee9359c892f2744959925b1e62c0159e9301bbc1121af5ca6a008d1ebd547539fa17c2e9e250aa421
- SSDEEP 12288:QwKfOVRo9yRYQAc4O8b8ITDnl5FF0/WV5CmiIKkEqybF:QxWVeyRYQAc4O8b8ITDnl5FP5Cmy
- TLSH T1DB45932173F98115F5F73B709D768AA02A76FC229EB5864E32487B5D1F70AA0CD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory