General
- Target 2026-08-16_8a56da2f8b290bb1f7627261cc3d591c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- Sample260816-cjra9sbm7v
- SHA256 5dadb2016cc64079e4c7ef59eb821da859c7221e424a5a1b9c9d9de5bad68a4a
- MD5 8a56da2f8b290bb1f7627261cc3d591c
- SHA1 125cd9cd1c4b6f071e06a5cf9ccbcccd5fed929d
- SHA512 52103c1e09cf78be707aedfd8818a4e21de49c5a39bcf2af23492155f4f704554ba4b0adc67178d64e22295693590561650ebc55c49e4af8694a822121ea6553
- SSDEEP 49152:s8Y74O8b8ITDnlPrEOUSR7Xgo4TiRPnLWvJBe:FRE4R7Xn4TiRCvJQ
- TLSH T189F517D66FE57116F1F32A30B9795B7C49233D75AEB2C24A3243F70A6931391A522323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_8a56da2f8b290bb1f7627261cc3d591c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_8a56da2f8b290bb1f7627261cc3d591c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_8a56da2f8b290bb1f7627261cc3d591c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- SHA256 5dadb2016cc64079e4c7ef59eb821da859c7221e424a5a1b9c9d9de5bad68a4a
- MD5 8a56da2f8b290bb1f7627261cc3d591c
- SHA1 125cd9cd1c4b6f071e06a5cf9ccbcccd5fed929d
- SHA512 52103c1e09cf78be707aedfd8818a4e21de49c5a39bcf2af23492155f4f704554ba4b0adc67178d64e22295693590561650ebc55c49e4af8694a822121ea6553
- SSDEEP 49152:s8Y74O8b8ITDnlPrEOUSR7Xgo4TiRPnLWvJBe:FRE4R7Xn4TiRCvJQ
- TLSH T189F517D66FE57116F1F32A30B9795B7C49233D75AEB2C24A3243F70A6931391A522323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory