General
- Target 2026-08-09_93f771d9bbf685b370542209cd2df3b1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 818KB
- Sample260809-yeanlscb53
- SHA256 c1cf206e2b13cf041d3e4665e963ed26706ed973b1b9b8ac9e04f5614138e4e7
- MD5 93f771d9bbf685b370542209cd2df3b1
- SHA1 e0823aec3fd8505f2d48acbbf569449f32b3e139
- SHA512 4c8fa6ef8e9cbc74e4a81f4a273b4e30c09e748f1ebe4fe87bc3357ad1f73e0446ee44df79638ace15cdf20e60e62573e32da49ee1fc852488a7017a9c847c06
- SSDEEP 12288:cwKfOVRo9yRY0N797B4O8b8ITDnlK03V/SLB+:cxWVeyRY0N797B4O8b8ITDnlK03M+
- TLSH T10705F97199848E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E74660DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_93f771d9bbf685b370542209cd2df3b1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_93f771d9bbf685b370542209cd2df3b1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_93f771d9bbf685b370542209cd2df3b1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 818KB
- SHA256 c1cf206e2b13cf041d3e4665e963ed26706ed973b1b9b8ac9e04f5614138e4e7
- MD5 93f771d9bbf685b370542209cd2df3b1
- SHA1 e0823aec3fd8505f2d48acbbf569449f32b3e139
- SHA512 4c8fa6ef8e9cbc74e4a81f4a273b4e30c09e748f1ebe4fe87bc3357ad1f73e0446ee44df79638ace15cdf20e60e62573e32da49ee1fc852488a7017a9c847c06
- SSDEEP 12288:cwKfOVRo9yRY0N797B4O8b8ITDnlK03V/SLB+:cxWVeyRY0N797B4O8b8ITDnlK03M+
- TLSH T10705F97199848E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E74660DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory