General
- Target 2026-08-10_8e79e2757a60bcc0c9ae6c593e178be2_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- Sample260810-3qc1bs1fkd
- SHA256 e90126a242f215c7c7ffd746d7de72eb1610a64a93bcfe3a4ff1863326c12525
- MD5 8e79e2757a60bcc0c9ae6c593e178be2
- SHA1 63e18cb63f3eabf85900265b1f3bde044f01602f
- SHA512 df67966fd7e76475889e4af066980e7f8d3efd98b695e491a7bc163fece9f755941244d6e7ac260990fbebed857973307e98f8e5425b0d34805fa442c8c94789
- SSDEEP 24576:mxWVeyRYqfM4O8b8ITDnlvsZZFz5F7eOs:m8YeM4O8b8ITDnlkZZFz5F7eP
- TLSH T10216E9E27FA0F125E4D11E31FD2696FD9A537C65DD22968B3183FF2F3A322608905216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_8e79e2757a60bcc0c9ae6c593e178be2_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_8e79e2757a60bcc0c9ae6c593e178be2_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8e79e2757a60bcc0c9ae6c593e178be2_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- SHA256 e90126a242f215c7c7ffd746d7de72eb1610a64a93bcfe3a4ff1863326c12525
- MD5 8e79e2757a60bcc0c9ae6c593e178be2
- SHA1 63e18cb63f3eabf85900265b1f3bde044f01602f
- SHA512 df67966fd7e76475889e4af066980e7f8d3efd98b695e491a7bc163fece9f755941244d6e7ac260990fbebed857973307e98f8e5425b0d34805fa442c8c94789
- SSDEEP 24576:mxWVeyRYqfM4O8b8ITDnlvsZZFz5F7eOs:m8YeM4O8b8ITDnlkZZFz5F7eP
- TLSH T10216E9E27FA0F125E4D11E31FD2696FD9A537C65DD22968B3183FF2F3A322608905216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory