General
- Target 2026-08-14_8ad9d25ac877db46b046b7f0a69288a5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260814-3e5k7stflb
- SHA256 6690097b5ee425d7f21e324bfe0f102a4d37976fea3adf3ec9a7e7044872fcf6
- MD5 8ad9d25ac877db46b046b7f0a69288a5
- SHA1 38e1ad7212cef7e23bb51211e0e4397daeb676df
- SHA512 d3f19aebe5c1e102f6bc971d25ff6da55f888ad06d544d32a635af80b95fa38bff0bec0b79df5555d22302b292988bb69adeef5c12a8ae5e7ac00f40110ce555
- SSDEEP 12288:HwKfOVRo9yRYymShLmZ4O8b8ITDnljFF0S87Eq0a:HxWVeyRYShLmZ4O8b8ITDnljF5a
- TLSH T17C35FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_8ad9d25ac877db46b046b7f0a69288a5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_8ad9d25ac877db46b046b7f0a69288a5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_8ad9d25ac877db46b046b7f0a69288a5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 6690097b5ee425d7f21e324bfe0f102a4d37976fea3adf3ec9a7e7044872fcf6
- MD5 8ad9d25ac877db46b046b7f0a69288a5
- SHA1 38e1ad7212cef7e23bb51211e0e4397daeb676df
- SHA512 d3f19aebe5c1e102f6bc971d25ff6da55f888ad06d544d32a635af80b95fa38bff0bec0b79df5555d22302b292988bb69adeef5c12a8ae5e7ac00f40110ce555
- SSDEEP 12288:HwKfOVRo9yRYymShLmZ4O8b8ITDnljFF0S87Eq0a:HxWVeyRYShLmZ4O8b8ITDnljF5a
- TLSH T17C35FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory