General
- Target 2026-08-14_7b70e4d82319b00f093c0790036aaf9b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- Sample260814-x2afpabe67
- SHA256 a29e6886957ca063230c352752bb649641d88e23e364e57424a8638cf1fad128
- MD5 7b70e4d82319b00f093c0790036aaf9b
- SHA1 639d41dda3a3d3c65c93e343646352a72f727fa7
- SHA512 96dd5a1644f1736cc3df3770f96eb49808327e5f25068d941bd29bee0f8bb24b3423adf93be4ea153878a736dcfc3779a7af964b2e31986d61df505a9ec42edf
- SSDEEP 49152:O8YN4O8b8ITDnl5Fv3d2xM1MQ6xKF+LWngB7GFM/K2Ho:7Dv3d2u65ysWngBSu/Ho
- TLSH T11006E523DFB58404D0669F35C82365A029333D5987A95A0F1AA4B63F4EF37826E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_7b70e4d82319b00f093c0790036aaf9b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_7b70e4d82319b00f093c0790036aaf9b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_7b70e4d82319b00f093c0790036aaf9b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- SHA256 a29e6886957ca063230c352752bb649641d88e23e364e57424a8638cf1fad128
- MD5 7b70e4d82319b00f093c0790036aaf9b
- SHA1 639d41dda3a3d3c65c93e343646352a72f727fa7
- SHA512 96dd5a1644f1736cc3df3770f96eb49808327e5f25068d941bd29bee0f8bb24b3423adf93be4ea153878a736dcfc3779a7af964b2e31986d61df505a9ec42edf
- SSDEEP 49152:O8YN4O8b8ITDnl5Fv3d2xM1MQ6xKF+LWngB7GFM/K2Ho:7Dv3d2u65ysWngBSu/Ho
- TLSH T11006E523DFB58404D0669F35C82365A029333D5987A95A0F1AA4B63F4EF37826E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory