General
- Target 2026-08-15_6d953ab7ae7a70ef2e176392bb42687c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260815-wpkv8a1zev
- SHA256 5592c8d4f5c6ff697e676c412cd4dce0d831b654916c2f8945bafaa9c918c366
- MD5 6d953ab7ae7a70ef2e176392bb42687c
- SHA1 6c8067ed90c52819a62041938d82bbf8ecfa2117
- SHA512 c5178000f94e05b0c384b7805b79814ed3c84dce196a72b54612bb2ff452dc0f4c1817d9187beebc175707823e4917906e39dfd265ffb95f7f4f52e24396defa
- SSDEEP 24576:KxWVeyRYRpy4O8b8ITDnljFTmXjmXrrkrdxISc:K8Ym4O8b8ITDnljFTo4IBx0
- TLSH T154653C62B2D8C025F4B63B308D7A8EA02B26BC155FB5864F3645371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_6d953ab7ae7a70ef2e176392bb42687c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_6d953ab7ae7a70ef2e176392bb42687c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_6d953ab7ae7a70ef2e176392bb42687c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 5592c8d4f5c6ff697e676c412cd4dce0d831b654916c2f8945bafaa9c918c366
- MD5 6d953ab7ae7a70ef2e176392bb42687c
- SHA1 6c8067ed90c52819a62041938d82bbf8ecfa2117
- SHA512 c5178000f94e05b0c384b7805b79814ed3c84dce196a72b54612bb2ff452dc0f4c1817d9187beebc175707823e4917906e39dfd265ffb95f7f4f52e24396defa
- SSDEEP 24576:KxWVeyRYRpy4O8b8ITDnljFTmXjmXrrkrdxISc:K8Ym4O8b8ITDnljFTo4IBx0
- TLSH T154653C62B2D8C025F4B63B308D7A8EA02B26BC155FB5864F3645371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory