General
- Target 2026-08-11_4ec376e082c2914944e2d65d19806f47_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260811-2svsgsem31
- SHA256 e9044a1cfc9a851e5bf2716e28cf687da2870435bbe248c207bed10728ded980
- MD5 4ec376e082c2914944e2d65d19806f47
- SHA1 9cfb7f60955f1cfa7116369e8466227723788fb3
- SHA512 4694568fae7778062993797748cd0b9294bbf2ea2bb8a1684d5c8b5055212f3bfbfcaf78f90e6cc6eb7aeb710a97c53b8b10ac3438f149eaeca70eb4f7f4a369
- SSDEEP 24576:AxWVeyRYGR4O8b8ITDnljFDmXjmXqrkrWxeSNC:A8Yu4O8b8ITDnljFDoZISx2
- TLSH T157653B62B2D4C025E4B73B308D7B8EA42A26BC165FB5964F37443B1D2F732A1DD21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_4ec376e082c2914944e2d65d19806f47_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_4ec376e082c2914944e2d65d19806f47_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_4ec376e082c2914944e2d65d19806f47_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 e9044a1cfc9a851e5bf2716e28cf687da2870435bbe248c207bed10728ded980
- MD5 4ec376e082c2914944e2d65d19806f47
- SHA1 9cfb7f60955f1cfa7116369e8466227723788fb3
- SHA512 4694568fae7778062993797748cd0b9294bbf2ea2bb8a1684d5c8b5055212f3bfbfcaf78f90e6cc6eb7aeb710a97c53b8b10ac3438f149eaeca70eb4f7f4a369
- SSDEEP 24576:AxWVeyRYGR4O8b8ITDnljFDmXjmXqrkrWxeSNC:A8Yu4O8b8ITDnljFDoZISx2
- TLSH T157653B62B2D4C025E4B73B308D7B8EA42A26BC165FB5964F37443B1D2F732A1DD21726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory