General
- Target 2026-08-09_780b766433da65dea77b3a1c1214d6e8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260809-zqlexswakb
- SHA256 ef16a14e6680884471b50f7d792c342dbfde8cf8e4733b9324a4bceeda010b13
- MD5 780b766433da65dea77b3a1c1214d6e8
- SHA1 c5c2e456ede52e7e91316d1af2afa7d9600051c5
- SHA512 0710eaeb660191d4789b692ecfff4026e0cc12ecc0aeb5d0c80cf68db29a8e49e20ded22c908b8f2b4ebcfd1bd716a9e4b2d65019c2f76e04af7ae151f78de6e
- SSDEEP 12288:ywKfOVRo9yRYbRLmy14O8b8ITDnl90w8bfSS/3cCA:yxWVeyRYbRLmk4O8b8ITDnlIqSECA
- TLSH T10585B8E2BEE0F010E4ED2E353D3A99BCA9237C65AD71829B3157F31D5A72260DC1531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_780b766433da65dea77b3a1c1214d6e8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_780b766433da65dea77b3a1c1214d6e8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_780b766433da65dea77b3a1c1214d6e8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 ef16a14e6680884471b50f7d792c342dbfde8cf8e4733b9324a4bceeda010b13
- MD5 780b766433da65dea77b3a1c1214d6e8
- SHA1 c5c2e456ede52e7e91316d1af2afa7d9600051c5
- SHA512 0710eaeb660191d4789b692ecfff4026e0cc12ecc0aeb5d0c80cf68db29a8e49e20ded22c908b8f2b4ebcfd1bd716a9e4b2d65019c2f76e04af7ae151f78de6e
- SSDEEP 12288:ywKfOVRo9yRYbRLmy14O8b8ITDnl90w8bfSS/3cCA:yxWVeyRYbRLmk4O8b8ITDnlIqSECA
- TLSH T10585B8E2BEE0F010E4ED2E353D3A99BCA9237C65AD71829B3157F31D5A72260DC1531A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory