General
- Target 2026-08-14_6d2ca9723cad345de167dd84e0c5eea1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260814-3my4dstgmd
- SHA256 d7233d0aefdcbebe4e599d701d7eb52923555b3e4f783892ae50df5b5256394b
- MD5 6d2ca9723cad345de167dd84e0c5eea1
- SHA1 1021b629644968dd334fb43be7fbf165d9119d76
- SHA512 837a70573c8c8f1df3aee36661b7c84f7d7582d927894398fc9dce425291fc622352659cde1ee4bcf1887e10dadb1592829540e99ae4dd975761a12fa4229fe9
- SSDEEP 12288:fwKfOVRo9yRYy8SvLmZ4O8b8ITDnljFF0S87Eq0m:fxWVeyRYgvLmZ4O8b8ITDnljF5m
- TLSH T16F35FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_6d2ca9723cad345de167dd84e0c5eea1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_6d2ca9723cad345de167dd84e0c5eea1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_6d2ca9723cad345de167dd84e0c5eea1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 d7233d0aefdcbebe4e599d701d7eb52923555b3e4f783892ae50df5b5256394b
- MD5 6d2ca9723cad345de167dd84e0c5eea1
- SHA1 1021b629644968dd334fb43be7fbf165d9119d76
- SHA512 837a70573c8c8f1df3aee36661b7c84f7d7582d927894398fc9dce425291fc622352659cde1ee4bcf1887e10dadb1592829540e99ae4dd975761a12fa4229fe9
- SSDEEP 12288:fwKfOVRo9yRYy8SvLmZ4O8b8ITDnljFF0S87Eq0m:fxWVeyRYgvLmZ4O8b8ITDnljF5m
- TLSH T16F35FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory