General
- Target 2026-08-08_12a175e53219611f9d1e440de1bf1648_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 840KB
- Sample260808-frlbrstyg1
- SHA256 d24c59519b0c5c6ba3ef5da45a3e37955e799d8ea9a23bc407fcf85c6db46d2a
- MD5 12a175e53219611f9d1e440de1bf1648
- SHA1 cd18c0281056f28ea0e3687ef59e80db66935425
- SHA512 46ed99d33d3e6b4aea1368a89748985661d199266e933cdc283f58ece51ed9fc5345697ec82ba509decc8d47368e33f32797e1cd923bf7c65fac40bc6134cb42
- SSDEEP 12288:DwKfOVRo9yRYDSA9LmV4O8b8ITDnl90PU1d/3cSC:DxWVeyRYuA9LmV4O8b8ITDnlPESC
- TLSH T10705A662F2D4C010E5BF3A344D7A4EA06936BC516EF086AF32683B4D5F716A1DC2572E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_12a175e53219611f9d1e440de1bf1648_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_12a175e53219611f9d1e440de1bf1648_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_12a175e53219611f9d1e440de1bf1648_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 840KB
- SHA256 d24c59519b0c5c6ba3ef5da45a3e37955e799d8ea9a23bc407fcf85c6db46d2a
- MD5 12a175e53219611f9d1e440de1bf1648
- SHA1 cd18c0281056f28ea0e3687ef59e80db66935425
- SHA512 46ed99d33d3e6b4aea1368a89748985661d199266e933cdc283f58ece51ed9fc5345697ec82ba509decc8d47368e33f32797e1cd923bf7c65fac40bc6134cb42
- SSDEEP 12288:DwKfOVRo9yRYDSA9LmV4O8b8ITDnl90PU1d/3cSC:DxWVeyRYuA9LmV4O8b8ITDnlPESC
- TLSH T10705A662F2D4C010E5BF3A344D7A4EA06936BC516EF086AF32683B4D5F716A1DC2572E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory