General
- Target 2026-08-08_b4bee6489438d7365d7019bc50e47ccc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260808-rlqvvaybkb
- SHA256 e75b11b12bf0f4d10b08bea1596b4a396e2810025233f0d3b20f0317f6df7c70
- MD5 b4bee6489438d7365d7019bc50e47ccc
- SHA1 09481d50804400c553a119742964870fd3b65d7e
- SHA512 35282d7be07b5374fa4884fbba88addd2b839c92257bb57fb47896ee312c0cdc633eb8a55c5b9ef67ca160aae676e55d9243e32de28b66f6ed0c4c1ebb3defda
- SSDEEP 24576:mxWVeyRYveHy4O8b8ITDnljFvmXjmXrrkrdxIS4:m8Y94O8b8ITDnljFvo4IBxw
- TLSH T162553C62B2D8C025F4B63B348D7A8EA02B26BC155FB5864F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b4bee6489438d7365d7019bc50e47ccc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b4bee6489438d7365d7019bc50e47ccc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b4bee6489438d7365d7019bc50e47ccc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 e75b11b12bf0f4d10b08bea1596b4a396e2810025233f0d3b20f0317f6df7c70
- MD5 b4bee6489438d7365d7019bc50e47ccc
- SHA1 09481d50804400c553a119742964870fd3b65d7e
- SHA512 35282d7be07b5374fa4884fbba88addd2b839c92257bb57fb47896ee312c0cdc633eb8a55c5b9ef67ca160aae676e55d9243e32de28b66f6ed0c4c1ebb3defda
- SSDEEP 24576:mxWVeyRYveHy4O8b8ITDnljFvmXjmXrrkrdxIS4:m8Y94O8b8ITDnljFvo4IBxw
- TLSH T162553C62B2D8C025F4B63B348D7A8EA02B26BC155FB5864F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory