General
- Target 2026-08-11_97c7f2323548336e08a2fbf614499eee_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.0MB
- Sample260811-fs848agm2w
- SHA256 228516798d79f2438d0d87858db8ef7c40cb60690098c82e138f8edc480a1caf
- MD5 97c7f2323548336e08a2fbf614499eee
- SHA1 c4ad6eaed7cf9f0492e4dabf965b1a812e8937d7
- SHA512 8b5802cb49ef7b7ed12e0d2feceb975f2e45b25a71e4b2477f2f20479fc86529cac73e0a397d46741e1be548116697fe41b70eb605627b376e248d6fe48725d5
- SSDEEP 24576:FxWVeyRYfWK14O8b8ITDnln5F7qJE4Fd/E:F8Yf314O8b8ITDnln5F7+E4Fd/E
- TLSH T1B016FDD5BE90F254E0A22B73BD2595BCA6D3BCE29D268D4B324FF31F15312508E1921B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_97c7f2323548336e08a2fbf614499eee_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_97c7f2323548336e08a2fbf614499eee_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_97c7f2323548336e08a2fbf614499eee_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.0MB
- SHA256 228516798d79f2438d0d87858db8ef7c40cb60690098c82e138f8edc480a1caf
- MD5 97c7f2323548336e08a2fbf614499eee
- SHA1 c4ad6eaed7cf9f0492e4dabf965b1a812e8937d7
- SHA512 8b5802cb49ef7b7ed12e0d2feceb975f2e45b25a71e4b2477f2f20479fc86529cac73e0a397d46741e1be548116697fe41b70eb605627b376e248d6fe48725d5
- SSDEEP 24576:FxWVeyRYfWK14O8b8ITDnln5F7qJE4Fd/E:F8Yf314O8b8ITDnln5F7+E4Fd/E
- TLSH T1B016FDD5BE90F254E0A22B73BD2595BCA6D3BCE29D268D4B324FF31F15312508E1921B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory