General
- Target 2026-08-10_70edad2f0e24f223b22b1054f5bfde93_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260810-fb518s1eqc
- SHA256 6f4f8d8b54b5491934cbcbc54f322da903eb7411050b2e8d8befe63980fcd5a2
- MD5 70edad2f0e24f223b22b1054f5bfde93
- SHA1 90544593dbb2cdf725c862bf71469d4438a13422
- SHA512 4203fcf84a1565472982c765be07fcd3f95daee25f08480930ea02ee52a0616633fd8892a94c0c26dce359d19b5d324671ea7cde891dd98eada6986dceab6d28
- SSDEEP 49152:C8YJ4O8b8ITDnl3JSR7Xgo4TiRPnLWvJBQ:XER7Xn4TiRCvJu
- TLSH T148859D316693CE11D46B3634896ABEB4251B7C115EE08BCB26843F0D7A316E5FFA1327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_70edad2f0e24f223b22b1054f5bfde93_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_70edad2f0e24f223b22b1054f5bfde93_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_70edad2f0e24f223b22b1054f5bfde93_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 6f4f8d8b54b5491934cbcbc54f322da903eb7411050b2e8d8befe63980fcd5a2
- MD5 70edad2f0e24f223b22b1054f5bfde93
- SHA1 90544593dbb2cdf725c862bf71469d4438a13422
- SHA512 4203fcf84a1565472982c765be07fcd3f95daee25f08480930ea02ee52a0616633fd8892a94c0c26dce359d19b5d324671ea7cde891dd98eada6986dceab6d28
- SSDEEP 49152:C8YJ4O8b8ITDnl3JSR7Xgo4TiRPnLWvJBQ:XER7Xn4TiRCvJu
- TLSH T148859D316693CE11D46B3634896ABEB4251B7C115EE08BCB26843F0D7A316E5FFA1327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory