General
- Target 2026-08-13_99c16746c09fdc115971cafc4ac7d554_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 821KB
- Sample260813-kk8wpst1d1
- SHA256 b1b0321b78c4f6b24b0820af29e04ed13224a872122a02f1dc0738716eb885ca
- MD5 99c16746c09fdc115971cafc4ac7d554
- SHA1 5941c83e8b25d3584003aea3c949ba54a460594d
- SHA512 d3a5b1b8b397747defce0dae2fd1cc235e1e805fa448dfee94132475cc65f1816fa8ccfe4006b25a5448202f6aca1ceb76432f52a6ba529296fa845c97215c8d
- SSDEEP 12288:kwKfOVRo9yRYJN797B4O8b8ITDnlK03V/SLBU:kxWVeyRYJN797B4O8b8ITDnlK03MU
- TLSH T19A05F97199844E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E746A0DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_99c16746c09fdc115971cafc4ac7d554_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_99c16746c09fdc115971cafc4ac7d554_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_99c16746c09fdc115971cafc4ac7d554_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 821KB
- SHA256 b1b0321b78c4f6b24b0820af29e04ed13224a872122a02f1dc0738716eb885ca
- MD5 99c16746c09fdc115971cafc4ac7d554
- SHA1 5941c83e8b25d3584003aea3c949ba54a460594d
- SHA512 d3a5b1b8b397747defce0dae2fd1cc235e1e805fa448dfee94132475cc65f1816fa8ccfe4006b25a5448202f6aca1ceb76432f52a6ba529296fa845c97215c8d
- SSDEEP 12288:kwKfOVRo9yRYJN797B4O8b8ITDnlK03V/SLBU:kxWVeyRYJN797B4O8b8ITDnlK03MU
- TLSH T19A05F97199844E67D82F7A30C1709E643A2BBDD0AED54BCA21583F2C7E746A0DC1277B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory