General
- Target 2026-08-15_512ab386244401669d77e913e78d84d2_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- Sample260815-wt52ysfj3v
- SHA256 a28f1b1fe388ea18d77e9dc2e9dfec97e30deb732b12aebe98f29cd7f02a08c4
- MD5 512ab386244401669d77e913e78d84d2
- SHA1 baa408b1a3966adbb1faf956fd9ca9bf10d9ddf0
- SHA512 9440ef5ea53eef5d289214b551efc7261940cc2dcace763e7d2286ca93d4b01614619d21b29910c907a1ce4ab93007a95132f60caad361aa17ae98b1b70d3749
- SSDEEP 12288:xwKfOVRo9yRYNm4O8b8ITDnljFF05vrfq8:xxWVeyRYw4O8b8ITDnljFC
- TLSH T19225E831B3E5C026E4B63B348D768EB43A26BC116EB5C64F36543B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_512ab386244401669d77e913e78d84d2_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_512ab386244401669d77e913e78d84d2_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_512ab386244401669d77e913e78d84d2_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- SHA256 a28f1b1fe388ea18d77e9dc2e9dfec97e30deb732b12aebe98f29cd7f02a08c4
- MD5 512ab386244401669d77e913e78d84d2
- SHA1 baa408b1a3966adbb1faf956fd9ca9bf10d9ddf0
- SHA512 9440ef5ea53eef5d289214b551efc7261940cc2dcace763e7d2286ca93d4b01614619d21b29910c907a1ce4ab93007a95132f60caad361aa17ae98b1b70d3749
- SSDEEP 12288:xwKfOVRo9yRYNm4O8b8ITDnljFF05vrfq8:xxWVeyRYw4O8b8ITDnljFC
- TLSH T19225E831B3E5C026E4B63B348D768EB43A26BC116EB5C64F36543B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory