General
- Target 2026-08-09_aa3e6f2935ab19089d8949cafb280b9c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260809-1lr8cawdqe
- SHA256 41a6adbd29c00fdc7af296337811b36bb7cd8111ff96e461400f1fbe58bb1f14
- MD5 aa3e6f2935ab19089d8949cafb280b9c
- SHA1 31836eacf42391e1a187ad38857c1cca6480dacc
- SHA512 afbe46aa8ab2d97b9f19b7f9ebda331c43b15225a3c1b347b569433a991f0a4888820fd52388099b74800a0b221dbba75c98f9bd67fa8639f71587171cfcc7a4
- SSDEEP 24576:2xWVeyRYiqwzYDteYIpLPLm74O8b8ITDnl4kQ2Is+I0:28Yuo4O8b8ITDnlFQRs+3
- TLSH T16395712163F8CA14F2FF6F3098741A66193BBC526DB883DE12157B4E2DB1660DE24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_aa3e6f2935ab19089d8949cafb280b9c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_aa3e6f2935ab19089d8949cafb280b9c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_aa3e6f2935ab19089d8949cafb280b9c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 41a6adbd29c00fdc7af296337811b36bb7cd8111ff96e461400f1fbe58bb1f14
- MD5 aa3e6f2935ab19089d8949cafb280b9c
- SHA1 31836eacf42391e1a187ad38857c1cca6480dacc
- SHA512 afbe46aa8ab2d97b9f19b7f9ebda331c43b15225a3c1b347b569433a991f0a4888820fd52388099b74800a0b221dbba75c98f9bd67fa8639f71587171cfcc7a4
- SSDEEP 24576:2xWVeyRYiqwzYDteYIpLPLm74O8b8ITDnl4kQ2Is+I0:28Yuo4O8b8ITDnlFQRs+3
- TLSH T16395712163F8CA14F2FF6F3098741A66193BBC526DB883DE12157B4E2DB1660DE24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory