General
- Target 2026-08-10_1cf9939138b3ceda1cf036d37e3be8e6_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- Sample260810-zmj3pas1bt
- SHA256 2c7b96c42d2ae112d3448da8aeceaa6b0a706c4637d63b0ae72b4abc23f65c53
- MD5 1cf9939138b3ceda1cf036d37e3be8e6
- SHA1 13f75662271949ad8326f74e73155dbb00a3e6eb
- SHA512 f0cb971f99abfad5cdce25a5853b343019e9929922ef237a2638554266d2e40269901f68647790ee7a3b9a235c095d298fca1497c7317927e390cc52085b8aaa
- SSDEEP 49152:a8YFAsadP0QiPzEz0AVISNT1Jtu4O8b8ITDnl0t7riih88ZOOFZ:fQ+P0PQQAVIxt7riih88ZOOFZ
- TLSH T175B59E2563E84119F5F37F7099B86A602A7B7C119FB5C68F2284374E1A74AE0DD32723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1cf9939138b3ceda1cf036d37e3be8e6_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1cf9939138b3ceda1cf036d37e3be8e6_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1cf9939138b3ceda1cf036d37e3be8e6_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- SHA256 2c7b96c42d2ae112d3448da8aeceaa6b0a706c4637d63b0ae72b4abc23f65c53
- MD5 1cf9939138b3ceda1cf036d37e3be8e6
- SHA1 13f75662271949ad8326f74e73155dbb00a3e6eb
- SHA512 f0cb971f99abfad5cdce25a5853b343019e9929922ef237a2638554266d2e40269901f68647790ee7a3b9a235c095d298fca1497c7317927e390cc52085b8aaa
- SSDEEP 49152:a8YFAsadP0QiPzEz0AVISNT1Jtu4O8b8ITDnl0t7riih88ZOOFZ:fQ+P0PQQAVIxt7riih88ZOOFZ
- TLSH T175B59E2563E84119F5F37F7099B86A602A7B7C119FB5C68F2284374E1A74AE0DD32723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory