General
- Target 2026-08-13_7447e95a37724efd61ef47334b7ed1d5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- Sample260813-e78asssaja
- SHA256 aee7db3eb913a938da980ee10c581e641d52419b6eac9d8d7aa5887c7803ace9
- MD5 7447e95a37724efd61ef47334b7ed1d5
- SHA1 118dd819edbfd3d617ae905f9eeb6e405e431d8e
- SHA512 4bd3af5f76329b341dc6e9a74da3da6880f586bf0a5797dab8ef8c38bde0fecc587941557f6c4da55259df385ea378cf64de7be66ad0d92cb55d7397d3704667
- SSDEEP 49152:h8YkA5UKDlbnwVtYA4AB+mmHmQFFiR4O8b8ITDnlK:qdKVwIAfmHmQDg
- TLSH T103063BF0B2CC4A1FEF1616B0653C4BF7722A2D4A0B559ED65C9133CE39B69298A07707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_7447e95a37724efd61ef47334b7ed1d5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_7447e95a37724efd61ef47334b7ed1d5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_7447e95a37724efd61ef47334b7ed1d5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- SHA256 aee7db3eb913a938da980ee10c581e641d52419b6eac9d8d7aa5887c7803ace9
- MD5 7447e95a37724efd61ef47334b7ed1d5
- SHA1 118dd819edbfd3d617ae905f9eeb6e405e431d8e
- SHA512 4bd3af5f76329b341dc6e9a74da3da6880f586bf0a5797dab8ef8c38bde0fecc587941557f6c4da55259df385ea378cf64de7be66ad0d92cb55d7397d3704667
- SSDEEP 49152:h8YkA5UKDlbnwVtYA4AB+mmHmQFFiR4O8b8ITDnlK:qdKVwIAfmHmQDg
- TLSH T103063BF0B2CC4A1FEF1616B0653C4BF7722A2D4A0B559ED65C9133CE39B69298A07707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory