General
- Target 2026-08-13_8ff5a38275655a4afe71ec08f0ff0b3c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 822KB
- Sample260813-evv5pszway
- SHA256 6b0135084196b1779cb898d9beb02a02ae3986b41354bcae2375923356b6ddde
- MD5 8ff5a38275655a4afe71ec08f0ff0b3c
- SHA1 ec3a141c21494fd4fbd2e48c1b338d9d8b7edac3
- SHA512 9796a41391596b8b6469883e56aac016e06ae7c789158b7792ad996df5f5515dd7a63692e5dca725b373e01d55bd03150d7b618ddfd8e01f26055da76ac82e4e
- SSDEEP 12288:7wKfOVRo9yRY0N797B4O8b8ITDnlK03V/SLBU:7xWVeyRY0N797B4O8b8ITDnlK03MU
- TLSH T17205F97199848E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E74660DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8ff5a38275655a4afe71ec08f0ff0b3c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8ff5a38275655a4afe71ec08f0ff0b3c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8ff5a38275655a4afe71ec08f0ff0b3c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 822KB
- SHA256 6b0135084196b1779cb898d9beb02a02ae3986b41354bcae2375923356b6ddde
- MD5 8ff5a38275655a4afe71ec08f0ff0b3c
- SHA1 ec3a141c21494fd4fbd2e48c1b338d9d8b7edac3
- SHA512 9796a41391596b8b6469883e56aac016e06ae7c789158b7792ad996df5f5515dd7a63692e5dca725b373e01d55bd03150d7b618ddfd8e01f26055da76ac82e4e
- SSDEEP 12288:7wKfOVRo9yRY0N797B4O8b8ITDnlK03V/SLBU:7xWVeyRY0N797B4O8b8ITDnlK03MU
- TLSH T17205F97199848E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E74660DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory