General
- Target 2026-08-18_a40802bfaaf27121d74103251d7361be_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 616KB
- Sample260818-has2dsytfs
- SHA256 159e989a9a77a8af24b170df93e95d799e7a79e70c5d5e67b2dd06059e3abcbd
- MD5 a40802bfaaf27121d74103251d7361be
- SHA1 1207938bf966351548c436a4c64b6f359423c45a
- SHA512 f5aebd4f4976840264ca0651f1203033f8069d8e60d8aac46ba71ee13f8b9fc6baf1353c9e1cb6f705913cd555f03927e81152df4be18817d3ee565a318d6df5
- SSDEEP 12288:awKfOVRo9yRYeN797B4O8b8ITDnlnaQQSqFSGpSLZeG:axWVeyRYeN797B4O8b8ITDnlnPD+XG
- TLSH T18BD42771A2D08F36E46F7A3085628D60762BBD255FE047CB32847F197B716B2CC2661B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_a40802bfaaf27121d74103251d7361be_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a40802bfaaf27121d74103251d7361be_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a40802bfaaf27121d74103251d7361be_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 616KB
- SHA256 159e989a9a77a8af24b170df93e95d799e7a79e70c5d5e67b2dd06059e3abcbd
- MD5 a40802bfaaf27121d74103251d7361be
- SHA1 1207938bf966351548c436a4c64b6f359423c45a
- SHA512 f5aebd4f4976840264ca0651f1203033f8069d8e60d8aac46ba71ee13f8b9fc6baf1353c9e1cb6f705913cd555f03927e81152df4be18817d3ee565a318d6df5
- SSDEEP 12288:awKfOVRo9yRYeN797B4O8b8ITDnlnaQQSqFSGpSLZeG:axWVeyRYeN797B4O8b8ITDnlnPD+XG
- TLSH T18BD42771A2D08F36E46F7A3085628D60762BBD255FE047CB32847F197B716B2CC2661B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory