General
- Target 2026-08-14_64659220dd0b65c4490c269d62c467f9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 865KB
- Sample260814-3qda4atgrf
- SHA256 63cb0706d6d8dffa1f05379950594916cef09dd19acc7aee06684a1dafc53f13
- MD5 64659220dd0b65c4490c269d62c467f9
- SHA1 02cba04f1c857ac163617cabbbdde148d5548f88
- SHA512 6c53fdbeb8691cdbf2e17997f4ef67ebfa695bec890afca892e9a298a572922f11230462a25189c61f80da02443a8c98dbab796f6034547eeacf670a4652536a
- SSDEEP 12288:2wKfOVRo9yRYHqz4O8b8ITDnl9FF0QEq9u:2xWVeyRYHqz4O8b8ITDnl9Fhu
- TLSH T1F115D831B2E5C025E4B63B348D778EA43A26BC116EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_64659220dd0b65c4490c269d62c467f9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_64659220dd0b65c4490c269d62c467f9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_64659220dd0b65c4490c269d62c467f9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 865KB
- SHA256 63cb0706d6d8dffa1f05379950594916cef09dd19acc7aee06684a1dafc53f13
- MD5 64659220dd0b65c4490c269d62c467f9
- SHA1 02cba04f1c857ac163617cabbbdde148d5548f88
- SHA512 6c53fdbeb8691cdbf2e17997f4ef67ebfa695bec890afca892e9a298a572922f11230462a25189c61f80da02443a8c98dbab796f6034547eeacf670a4652536a
- SSDEEP 12288:2wKfOVRo9yRYHqz4O8b8ITDnl9FF0QEq9u:2xWVeyRYHqz4O8b8ITDnl9Fhu
- TLSH T1F115D831B2E5C025E4B63B348D778EA43A26BC116EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory