General
- Target 2026-08-08_bcf89b5891ee86317af9644dc398c249_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260808-nmra8awbjd
- SHA256 f486adaa6853321ad5e138f7f2886ca91e985dea7c4f98c3d19507901242c6d2
- MD5 bcf89b5891ee86317af9644dc398c249
- SHA1 401c4fd81048b62eda36648c3b79fb105652a621
- SHA512 f679c8a8e97670fa584370b6a49c5b366d0eb6c080aed72abba67fec873daaf6c875be23232af4e725deae28be78ea30d2012fe7fdcfd8e128c8b89206669e7b
- SSDEEP 12288:0wKfOVRo9yRYl6c4O8b8ITDnl10VX1GoFttd:0xWVeyRYkc4O8b8ITDnlultd
- TLSH T12965962177E4D515F2F33B309DB54AA42A267C116EF5C64F2342B74F2AB1AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_bcf89b5891ee86317af9644dc398c249_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_bcf89b5891ee86317af9644dc398c249_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_bcf89b5891ee86317af9644dc398c249_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 f486adaa6853321ad5e138f7f2886ca91e985dea7c4f98c3d19507901242c6d2
- MD5 bcf89b5891ee86317af9644dc398c249
- SHA1 401c4fd81048b62eda36648c3b79fb105652a621
- SHA512 f679c8a8e97670fa584370b6a49c5b366d0eb6c080aed72abba67fec873daaf6c875be23232af4e725deae28be78ea30d2012fe7fdcfd8e128c8b89206669e7b
- SSDEEP 12288:0wKfOVRo9yRYl6c4O8b8ITDnl10VX1GoFttd:0xWVeyRYkc4O8b8ITDnlultd
- TLSH T12965962177E4D515F2F33B309DB54AA42A267C116EF5C64F2342B74F2AB1AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory