General
- Target 2026-08-13_8212634bd35ad40ecb52f732db4fe5bb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260813-kzdn4swble
- SHA256 28078a0ddc09623c490dca0fb58569fe90bfec7fc150ea5d805a6911f5d8f2d7
- MD5 8212634bd35ad40ecb52f732db4fe5bb
- SHA1 13a156ff530b3ae992a6391061fad0ed40723770
- SHA512 9ec2d30f2a07dc03dac556ae48c79181ff75286619b1cbc70b56d03ae710ed69d7405fa2850c7e3e857d928956f4538d47d335b95ad1c70b3da7bc12626a1f4d
- SSDEEP 24576:XxWVeyRYAqwzYDteYIpLPLm14O8b8ITDnli7K15P:X8YIC4O8b8ITDnlh15P
- TLSH T15455A221A3E48A11F2FFAE3044756E22262BBC516EB583DE22147F4E7D71750EE24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8212634bd35ad40ecb52f732db4fe5bb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8212634bd35ad40ecb52f732db4fe5bb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8212634bd35ad40ecb52f732db4fe5bb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 28078a0ddc09623c490dca0fb58569fe90bfec7fc150ea5d805a6911f5d8f2d7
- MD5 8212634bd35ad40ecb52f732db4fe5bb
- SHA1 13a156ff530b3ae992a6391061fad0ed40723770
- SHA512 9ec2d30f2a07dc03dac556ae48c79181ff75286619b1cbc70b56d03ae710ed69d7405fa2850c7e3e857d928956f4538d47d335b95ad1c70b3da7bc12626a1f4d
- SSDEEP 24576:XxWVeyRYAqwzYDteYIpLPLm14O8b8ITDnli7K15P:X8YIC4O8b8ITDnlh15P
- TLSH T15455A221A3E48A11F2FFAE3044756E22262BBC516EB583DE22147F4E7D71750EE24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory