General
- Target 2026-08-17_9fd4fcf4660e1f31d82307dedd2c9faf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260818-ac5tzabl6t
- SHA256 30d2ebc43407716057375f1675375723e87e602f49fa6a69379b1de44748096d
- MD5 9fd4fcf4660e1f31d82307dedd2c9faf
- SHA1 811a7f7b0826bd29e620e7831df8159973b503de
- SHA512 6b245575f92fd793ea39ae43730e7546d4d9f3e9d1481d0d1776332570c547a6079eb45c2143fc9a071df249ebb3b5680b367d543f1ba33bf9905efac3c4683e
- SSDEEP 12288:lwKfOVRo9yRYS0Sl4O8b8ITDnlzjUYNIN7iR:lxWVeyRYS/4O8b8ITDnlzjp+MR
- TLSH T1B835E82273D48B65F5BB3B3089B64A606A677C555F75C38F32803B0E7A717A0D922723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_9fd4fcf4660e1f31d82307dedd2c9faf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_9fd4fcf4660e1f31d82307dedd2c9faf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_9fd4fcf4660e1f31d82307dedd2c9faf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 30d2ebc43407716057375f1675375723e87e602f49fa6a69379b1de44748096d
- MD5 9fd4fcf4660e1f31d82307dedd2c9faf
- SHA1 811a7f7b0826bd29e620e7831df8159973b503de
- SHA512 6b245575f92fd793ea39ae43730e7546d4d9f3e9d1481d0d1776332570c547a6079eb45c2143fc9a071df249ebb3b5680b367d543f1ba33bf9905efac3c4683e
- SSDEEP 12288:lwKfOVRo9yRYS0Sl4O8b8ITDnlzjUYNIN7iR:lxWVeyRYS/4O8b8ITDnlzjp+MR
- TLSH T1B835E82273D48B65F5BB3B3089B64A606A677C555F75C38F32803B0E7A717A0D922723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory