General
- Target 2026-08-10_5984b9e1ea6aa655f8f0afc4a3cdbf10_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- Sample260810-y6v4maxfkc
- SHA256 af0e86861bc3ff15ad92eef97e8545d7f5b6c36aceddb4cc7c116b92b63d7fb7
- MD5 5984b9e1ea6aa655f8f0afc4a3cdbf10
- SHA1 6da08a75fffaa56279bccbc5f8f1555bf2a0985d
- SHA512 ef965fe2a119eba9c925998cdf19b71c8a05f87789303fcdbb407db019835b6af3c0249dcf17ea451de168e7a6b4aa289ae18d506a6c038f3d7d5ce8881dfe70
- SSDEEP 12288:QwKfOVRo9yRY36Co4O8b8ITDnlL0IiV/83:QxWVeyRY36Co4O8b8ITDnlt
- TLSH T1F015E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_5984b9e1ea6aa655f8f0afc4a3cdbf10_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_5984b9e1ea6aa655f8f0afc4a3cdbf10_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_5984b9e1ea6aa655f8f0afc4a3cdbf10_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- SHA256 af0e86861bc3ff15ad92eef97e8545d7f5b6c36aceddb4cc7c116b92b63d7fb7
- MD5 5984b9e1ea6aa655f8f0afc4a3cdbf10
- SHA1 6da08a75fffaa56279bccbc5f8f1555bf2a0985d
- SHA512 ef965fe2a119eba9c925998cdf19b71c8a05f87789303fcdbb407db019835b6af3c0249dcf17ea451de168e7a6b4aa289ae18d506a6c038f3d7d5ce8881dfe70
- SSDEEP 12288:QwKfOVRo9yRY36Co4O8b8ITDnlL0IiV/83:QxWVeyRY36Co4O8b8ITDnlt
- TLSH T1F015E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory