General
- Target 2026-08-18_8619eaf7de61b13da512888b32ce1b55_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260818-3e33daca29
- SHA256 b33226b24f3490b29763e71cebe6c723549b1acd2f37fc860417fae4485b8ef1
- MD5 8619eaf7de61b13da512888b32ce1b55
- SHA1 ad91067ea571b055f8eca365f5f5e462f86a9e9b
- SHA512 28613b4b80361c4d8069db09d4e8fdeb2166d02f5422a9f39eabedba3bbecc597bb9198228466ae8234db08dc47f85dfe007d2930f922514d72271789d7661bf
- SSDEEP 49152:l8YEcTi4O8b8ITDnlV7SR7Xgo4TiRPnLWvJBp:WJcIR7Xn4TiRCvJf
- TLSH T1DBA57C21E6938E11D46B3531896ABD70291B3C255EE08B8B368C3F1D3B712E1FB65727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_8619eaf7de61b13da512888b32ce1b55_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_8619eaf7de61b13da512888b32ce1b55_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_8619eaf7de61b13da512888b32ce1b55_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 b33226b24f3490b29763e71cebe6c723549b1acd2f37fc860417fae4485b8ef1
- MD5 8619eaf7de61b13da512888b32ce1b55
- SHA1 ad91067ea571b055f8eca365f5f5e462f86a9e9b
- SHA512 28613b4b80361c4d8069db09d4e8fdeb2166d02f5422a9f39eabedba3bbecc597bb9198228466ae8234db08dc47f85dfe007d2930f922514d72271789d7661bf
- SSDEEP 49152:l8YEcTi4O8b8ITDnlV7SR7Xgo4TiRPnLWvJBp:WJcIR7Xn4TiRCvJf
- TLSH T1DBA57C21E6938E11D46B3531896ABD70291B3C255EE08B8B368C3F1D3B712E1FB65727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory