General
- Target 2026-08-09_7149dc8da308f14172b51cce49f9acdb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 818KB
- Sample260809-yhkb8avclc
- SHA256 fd406ce32eebab35f042c5ba6670706a6e5cdd5f62dbad016bc574a3ca3f5fb0
- MD5 7149dc8da308f14172b51cce49f9acdb
- SHA1 872c873cc87b5d6fff1e00b8112f2e926d6d53ca
- SHA512 56f2ff4fd9f38dc4af3413b0fe1b553f17e5c26ccc6f3f5a2c8ea44a5be41983e1edf3d356a224cf82358033963e255e202007f1e1c5462b6c0f5f50534df552
- SSDEEP 12288:cwKfOVRo9yRYvN797B4O8b8ITDnlK03V/SLBX:cxWVeyRYvN797B4O8b8ITDnlK03MX
- TLSH T1D805F97199848E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E74660DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7149dc8da308f14172b51cce49f9acdb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7149dc8da308f14172b51cce49f9acdb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7149dc8da308f14172b51cce49f9acdb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 818KB
- SHA256 fd406ce32eebab35f042c5ba6670706a6e5cdd5f62dbad016bc574a3ca3f5fb0
- MD5 7149dc8da308f14172b51cce49f9acdb
- SHA1 872c873cc87b5d6fff1e00b8112f2e926d6d53ca
- SHA512 56f2ff4fd9f38dc4af3413b0fe1b553f17e5c26ccc6f3f5a2c8ea44a5be41983e1edf3d356a224cf82358033963e255e202007f1e1c5462b6c0f5f50534df552
- SSDEEP 12288:cwKfOVRo9yRYvN797B4O8b8ITDnlK03V/SLBX:cxWVeyRYvN797B4O8b8ITDnlK03MX
- TLSH T1D805F97199848E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E74660DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory