General
- Target 2026-08-15_cf85be936dbec18b4267ade3c4d644a9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260815-v6bs7sen5v
- SHA256 e4c91a02ca6cd63e8c57959b5d8a1e1f43595def8039fac40ef87ec63caf5642
- MD5 cf85be936dbec18b4267ade3c4d644a9
- SHA1 e8683964fbb08da7b8bf3cd4af170d3ba21b16b7
- SHA512 7b649fbaffa66963a53267c3e9346787a8edf30b104190a42d69c89d627a6e91212181d2aa7cd3d11ef0752701c30fea587b5ca00a8f7b37e1e09beaccc19842
- SSDEEP 12288:bwKfOVRo9yRYbc4O8b8ITDnljFF0eaHJKkEq4bp1:bxWVeyRYbc4O8b8ITDnljFBaM1
- TLSH T1E5458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_cf85be936dbec18b4267ade3c4d644a9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_cf85be936dbec18b4267ade3c4d644a9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_cf85be936dbec18b4267ade3c4d644a9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 e4c91a02ca6cd63e8c57959b5d8a1e1f43595def8039fac40ef87ec63caf5642
- MD5 cf85be936dbec18b4267ade3c4d644a9
- SHA1 e8683964fbb08da7b8bf3cd4af170d3ba21b16b7
- SHA512 7b649fbaffa66963a53267c3e9346787a8edf30b104190a42d69c89d627a6e91212181d2aa7cd3d11ef0752701c30fea587b5ca00a8f7b37e1e09beaccc19842
- SSDEEP 12288:bwKfOVRo9yRYbc4O8b8ITDnljFF0eaHJKkEq4bp1:bxWVeyRYbc4O8b8ITDnljFBaM1
- TLSH T1E5458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory