General
- Target 2026-08-17_59ec5044f93756406c4e400b9fcf5c18_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 943KB
- Sample260817-g7fa5avdkb
- SHA256 b141d5a123acbc03e6549c2ea87bb597667188a2ed780ad6eea016554f270df4
- MD5 59ec5044f93756406c4e400b9fcf5c18
- SHA1 9ca09f7c17a5be666f43ec494b6bb25c15305801
- SHA512 62269572e2b59ec6a297fa2d5d313fbba3b64e59780bec329bad74faff8d61f537d82e980e2f228ec9d6fbc06f58800abb15fb31e97c329c52349390cf25d799
- SSDEEP 12288:WwKfOVRo9yRYCd8Em4O8b8ITDnljFF0kufqR:WxWVeyRY08t4O8b8ITDnljFF
- TLSH T12D25D831B3E5C025E4B63B344D778EA03A26BC116EB5C64F36943B1E6F716A0DD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_59ec5044f93756406c4e400b9fcf5c18_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_59ec5044f93756406c4e400b9fcf5c18_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_59ec5044f93756406c4e400b9fcf5c18_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 943KB
- SHA256 b141d5a123acbc03e6549c2ea87bb597667188a2ed780ad6eea016554f270df4
- MD5 59ec5044f93756406c4e400b9fcf5c18
- SHA1 9ca09f7c17a5be666f43ec494b6bb25c15305801
- SHA512 62269572e2b59ec6a297fa2d5d313fbba3b64e59780bec329bad74faff8d61f537d82e980e2f228ec9d6fbc06f58800abb15fb31e97c329c52349390cf25d799
- SSDEEP 12288:WwKfOVRo9yRYCd8Em4O8b8ITDnljFF0kufqR:WxWVeyRY08t4O8b8ITDnljFF
- TLSH T12D25D831B3E5C025E4B63B344D778EA03A26BC116EB5C64F36943B1E6F716A0DD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory