General
- Target 2026-08-09_8557558990376ee67ffc39cbcc16e242_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260809-yfwmgacp7w
- SHA256 777de4d89cb300875ed91ab352fd8fd6ce0b56d18cfa6cdc87bb9e30361c6add
- MD5 8557558990376ee67ffc39cbcc16e242
- SHA1 e10d473384251af5c68268e2f23fe91e4ae91e65
- SHA512 63f9388aa36b62febfd99dc83f39ae7cbe240511ee5490e6abea32816377b69b46cb367aa20df6d8c972bf4f3aa967ce5aa11fdf664b2fb58861416113c3d6fe
- SSDEEP 12288:OwKfOVRo9yRYm64O8b8ITDnlL07U+DFvnpp8M3:OxWVeyRYm64O8b8ITDnl+pl3
- TLSH T1CE25C621B2D58025F5F23B304D7B8EA02A26BC566EB5C25F3658770D6F317A1EC2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8557558990376ee67ffc39cbcc16e242_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8557558990376ee67ffc39cbcc16e242_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_8557558990376ee67ffc39cbcc16e242_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 777de4d89cb300875ed91ab352fd8fd6ce0b56d18cfa6cdc87bb9e30361c6add
- MD5 8557558990376ee67ffc39cbcc16e242
- SHA1 e10d473384251af5c68268e2f23fe91e4ae91e65
- SHA512 63f9388aa36b62febfd99dc83f39ae7cbe240511ee5490e6abea32816377b69b46cb367aa20df6d8c972bf4f3aa967ce5aa11fdf664b2fb58861416113c3d6fe
- SSDEEP 12288:OwKfOVRo9yRYm64O8b8ITDnlL07U+DFvnpp8M3:OxWVeyRYm64O8b8ITDnl+pl3
- TLSH T1CE25C621B2D58025F5F23B304D7B8EA02A26BC566EB5C25F3658770D6F317A1EC2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory