General
- Target 2026-08-18_962703e6a12df065366b25ccfc84fba3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260818-hdadfsfm4t
- SHA256 5d139071163b2140eaff754b537d22a96d60a11ba8d454c0e08b7d5e0cbcf548
- MD5 962703e6a12df065366b25ccfc84fba3
- SHA1 3913da377a19720bad2629061952923399e12f32
- SHA512 10f79fe2703f048d82ad9e9be44bdd79f0a2b065be9f5936f380ebf38d57c30604894a3ec051495f627dca253c2bcaa5d73cdb137e57e25ae571fc1fe84747e5
- SSDEEP 12288:YwKfOVRo9yRYBafync4O8b8ITDnljFF00TqTA5DlHJKkcqTbz:YxWVeyRYBauc4O8b8ITDnljFVmA5Dlz
- TLSH T1E185A61962A5401BF4B23A70C87D6F540A617EBA6E73C22A7904730BBB717D3D823776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_962703e6a12df065366b25ccfc84fba3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_962703e6a12df065366b25ccfc84fba3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_962703e6a12df065366b25ccfc84fba3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 5d139071163b2140eaff754b537d22a96d60a11ba8d454c0e08b7d5e0cbcf548
- MD5 962703e6a12df065366b25ccfc84fba3
- SHA1 3913da377a19720bad2629061952923399e12f32
- SHA512 10f79fe2703f048d82ad9e9be44bdd79f0a2b065be9f5936f380ebf38d57c30604894a3ec051495f627dca253c2bcaa5d73cdb137e57e25ae571fc1fe84747e5
- SSDEEP 12288:YwKfOVRo9yRYBafync4O8b8ITDnljFF00TqTA5DlHJKkcqTbz:YxWVeyRYBauc4O8b8ITDnljFVmA5Dlz
- TLSH T1E185A61962A5401BF4B23A70C87D6F540A617EBA6E73C22A7904730BBB717D3D823776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory