General
- Target 2026-08-10_49e4be86f28354debdbcb58db7d354a5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- Sample260810-zadedaad86
- SHA256 c64f05c3dcd58053f6edbc6a3289d1e933bb78ad88bfe7f3ec4dd6084eec4c0a
- MD5 49e4be86f28354debdbcb58db7d354a5
- SHA1 866797d7c62ef4d476de64ea90ad27b55793afab
- SHA512 770f5964b804820aeb090f0c5bdad904547ca33689c1bf8ec6cf2118a237766ec1610bb20ae6a149273b1f3df93b85e1f95c9ce9c464f67c1b7606645d015b72
- SSDEEP 12288:QwKfOVRo9yRY36Cu4O8b8ITDnlL0IiV/83:QxWVeyRY36Cu4O8b8ITDnlt
- TLSH T12115E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_49e4be86f28354debdbcb58db7d354a5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_49e4be86f28354debdbcb58db7d354a5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_49e4be86f28354debdbcb58db7d354a5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- SHA256 c64f05c3dcd58053f6edbc6a3289d1e933bb78ad88bfe7f3ec4dd6084eec4c0a
- MD5 49e4be86f28354debdbcb58db7d354a5
- SHA1 866797d7c62ef4d476de64ea90ad27b55793afab
- SHA512 770f5964b804820aeb090f0c5bdad904547ca33689c1bf8ec6cf2118a237766ec1610bb20ae6a149273b1f3df93b85e1f95c9ce9c464f67c1b7606645d015b72
- SSDEEP 12288:QwKfOVRo9yRY36Cu4O8b8ITDnlL0IiV/83:QxWVeyRY36Cu4O8b8ITDnlt
- TLSH T12115E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory