General
- Target 2026-08-09_8bc69acfc0ca546a3adec3419851c86e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- Sample260809-znj43scd87
- SHA256 c99f0c467cbde3053e62b95ffc801136144bd31e0c7450c4efae5a2091cea64c
- MD5 8bc69acfc0ca546a3adec3419851c86e
- SHA1 7eeca8e56fea31a7fd521b9a1b1215b5eb3d5778
- SHA512 9e1e5ff82eea6e94a2de3f2214ca15308a09bc682fbfa5115f3b51bef4a18c8ed8ef5d57333d95e262a5d018bc38fa1d06133bdb9fe6e467e776b2ad7048947f
- SSDEEP 12288:5wKfOVRo9yRYl6E4O8b8ITDnl10w8bfSXGoFkep:5xWVeyRYlN4O8b8ITDnlAqXcep
- TLSH T15BB562E17FE4F114F1F22E307A7956BC9A237C61AEB6858B3243F71E1972660C916312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_8bc69acfc0ca546a3adec3419851c86e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_8bc69acfc0ca546a3adec3419851c86e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_8bc69acfc0ca546a3adec3419851c86e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- SHA256 c99f0c467cbde3053e62b95ffc801136144bd31e0c7450c4efae5a2091cea64c
- MD5 8bc69acfc0ca546a3adec3419851c86e
- SHA1 7eeca8e56fea31a7fd521b9a1b1215b5eb3d5778
- SHA512 9e1e5ff82eea6e94a2de3f2214ca15308a09bc682fbfa5115f3b51bef4a18c8ed8ef5d57333d95e262a5d018bc38fa1d06133bdb9fe6e467e776b2ad7048947f
- SSDEEP 12288:5wKfOVRo9yRYl6E4O8b8ITDnl10w8bfSXGoFkep:5xWVeyRYlN4O8b8ITDnlAqXcep
- TLSH T15BB562E17FE4F114F1F22E307A7956BC9A237C61AEB6858B3243F71E1972660C916312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory