General
- Target 2026-08-15_c1958be544edf38a9e66c7c13ee81cd7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 932KB
- Sample260815-v8rx7sen8w
- SHA256 d77cdf4c22d316ae708c04e95ff5f02807b799d37dec98a504baf21cf13ac7fc
- MD5 c1958be544edf38a9e66c7c13ee81cd7
- SHA1 7dcb066da9b8662bd6b87e0fd73b1d9dc4ffa331
- SHA512 1f9bb663fa46225705d935d31f60d2da80462acf20ffb590402f268b7cd96cc8e5cbaa7195b2c32e3c74d2d922d695375a46c56f57c1204b08f07089e81fcd83
- SSDEEP 24576:bxWVeyRYV7dF1+nLZWMHk4O8b8ITDnlv3NC:b8Y+k4O8b8ITDnlv0
- TLSH T16015B62177E98115F5F37F309EB94AA06A77BC51AEB5C64F2640334E0E71AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_c1958be544edf38a9e66c7c13ee81cd7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_c1958be544edf38a9e66c7c13ee81cd7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_c1958be544edf38a9e66c7c13ee81cd7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 932KB
- SHA256 d77cdf4c22d316ae708c04e95ff5f02807b799d37dec98a504baf21cf13ac7fc
- MD5 c1958be544edf38a9e66c7c13ee81cd7
- SHA1 7dcb066da9b8662bd6b87e0fd73b1d9dc4ffa331
- SHA512 1f9bb663fa46225705d935d31f60d2da80462acf20ffb590402f268b7cd96cc8e5cbaa7195b2c32e3c74d2d922d695375a46c56f57c1204b08f07089e81fcd83
- SSDEEP 24576:bxWVeyRYV7dF1+nLZWMHk4O8b8ITDnlv3NC:b8Y+k4O8b8ITDnlv0
- TLSH T16015B62177E98115F5F37F309EB94AA06A77BC51AEB5C64F2640334E0E71AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory