General
- Target 2026-08-17_978b5c727542fd0c07b04e3cb1a4a46d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260817-gs7rtsthjc
- SHA256 04c71bc0ac16d074b2a83f5d7c8646820fd7f89e35303a6581b3ce37cec66f27
- MD5 978b5c727542fd0c07b04e3cb1a4a46d
- SHA1 26a98236169d7b6670820da0481ca922d869f15b
- SHA512 629503011c93e333fb4a537c33ca603aa388634e1d7fe264be3cc8dbd46d1c408b0f462b7365bbe877bdb90258b955ea3a39c6c234aa04f86def91919ad4a179
- SSDEEP 24576:TxWVeyRYk4Z4O8b8ITDnljFV7VWpCnmhI7egc:T8YZ4O8b8ITDnljFV7VWpCnmhI7egc
- TLSH T1BE06F7CDA365CD07DC69DE3C44B24D501E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_978b5c727542fd0c07b04e3cb1a4a46d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_978b5c727542fd0c07b04e3cb1a4a46d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_978b5c727542fd0c07b04e3cb1a4a46d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 04c71bc0ac16d074b2a83f5d7c8646820fd7f89e35303a6581b3ce37cec66f27
- MD5 978b5c727542fd0c07b04e3cb1a4a46d
- SHA1 26a98236169d7b6670820da0481ca922d869f15b
- SHA512 629503011c93e333fb4a537c33ca603aa388634e1d7fe264be3cc8dbd46d1c408b0f462b7365bbe877bdb90258b955ea3a39c6c234aa04f86def91919ad4a179
- SSDEEP 24576:TxWVeyRYk4Z4O8b8ITDnljFV7VWpCnmhI7egc:T8YZ4O8b8ITDnljFV7VWpCnmhI7egc
- TLSH T1BE06F7CDA365CD07DC69DE3C44B24D501E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory