General
- Target 2026-08-09_10eeb4b6a7f3e9f7f96934aed77441f7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260809-1rjs6aek2s
- SHA256 2b692e6e13bcc1bbacde72b24bd4f36c264f29b2df9632ddeebe38677c963415
- MD5 10eeb4b6a7f3e9f7f96934aed77441f7
- SHA1 87465c67a3b32815f389f9ebaf014d80635eef51
- SHA512 9e480b34f1a0b84ce8e13ee6c910aa2391b6dc6069035d7416902171a3254ac0d09e3d3beb65d152acbd9a127328adfa3608d68b4dc1f85229c535eac0f50af3
- SSDEEP 24576:+xWVeyRYuOqwzYDteYIpLPLm74O8b8ITDnl4kQ2Is+Ib:+8Yu6o4O8b8ITDnlFQRs+Y
- TLSH T17295712163F8CA14F2FF6F3098741A66193BBC526DB883DE12157B4E2DB1660DE24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_10eeb4b6a7f3e9f7f96934aed77441f7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_10eeb4b6a7f3e9f7f96934aed77441f7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_10eeb4b6a7f3e9f7f96934aed77441f7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 2b692e6e13bcc1bbacde72b24bd4f36c264f29b2df9632ddeebe38677c963415
- MD5 10eeb4b6a7f3e9f7f96934aed77441f7
- SHA1 87465c67a3b32815f389f9ebaf014d80635eef51
- SHA512 9e480b34f1a0b84ce8e13ee6c910aa2391b6dc6069035d7416902171a3254ac0d09e3d3beb65d152acbd9a127328adfa3608d68b4dc1f85229c535eac0f50af3
- SSDEEP 24576:+xWVeyRYuOqwzYDteYIpLPLm74O8b8ITDnl4kQ2Is+Ib:+8Yu6o4O8b8ITDnlFQRs+Y
- TLSH T17295712163F8CA14F2FF6F3098741A66193BBC526DB883DE12157B4E2DB1660DE24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory