General
- Target 2026-08-13_734bb977329db7aa18c43641625c79cc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260813-2j5lbszdrb
- SHA256 a35273244aa1c9daec094bc5dee6e94cbdde7cfae923be04e4a7dfd9dd83f326
- MD5 734bb977329db7aa18c43641625c79cc
- SHA1 7169cb8e2552962f9b191dbea05625d623397ec0
- SHA512 7b95908f7c7777c5b651ddd8a06e3712382bbdb68f6352617c88477bb5345723dec0ff3ac3ddf02d58875c996c82cc957a02cea849707e988c044b03eee03bab
- SSDEEP 24576:ixWVeyR+oKdF1+nLZWMHfLmL4O8b8ITDnlkx:i8+Kk4O8b8ITDnlk
- TLSH T16C758263F2E48517F2B7FB3058794AB11A26BC5DADB4839E32483B4E6E71650DC21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_734bb977329db7aa18c43641625c79cc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_734bb977329db7aa18c43641625c79cc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_734bb977329db7aa18c43641625c79cc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 a35273244aa1c9daec094bc5dee6e94cbdde7cfae923be04e4a7dfd9dd83f326
- MD5 734bb977329db7aa18c43641625c79cc
- SHA1 7169cb8e2552962f9b191dbea05625d623397ec0
- SHA512 7b95908f7c7777c5b651ddd8a06e3712382bbdb68f6352617c88477bb5345723dec0ff3ac3ddf02d58875c996c82cc957a02cea849707e988c044b03eee03bab
- SSDEEP 24576:ixWVeyR+oKdF1+nLZWMHfLmL4O8b8ITDnlkx:i8+Kk4O8b8ITDnlk
- TLSH T16C758263F2E48517F2B7FB3058794AB11A26BC5DADB4839E32483B4E6E71650DC21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory