General
- Target 2026-08-18_5f34a267d744388a2755bb1829823d57_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260818-hmv2hsxhkf
- SHA256 09257a1c177c5cb6b46e3f75a24406c3cafbb56b9efc0c5c82f607c791f81419
- MD5 5f34a267d744388a2755bb1829823d57
- SHA1 877198a4bac574e30bf252473040f5bb9e207e62
- SHA512 ad52e9b50e785ab54c9aaaea129829fd33c87cbdf1e0756110309ff02eefc4549c97de359cfac7f7132519095550d42953e42468395ce13039eeaa25c92b98e0
- SSDEEP 49152:18YncCyEq9DRho/ctH01Ws74rA4RUBDHgE3dqFWV+4O8b8ITDnl/M6q:GO5qFb0I+0PqkWdM
- TLSH T145B5AE312590CE26E3EF763089614E6435176C154EE84BCB6382FF8B7BB22B5DD66207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_5f34a267d744388a2755bb1829823d57_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_5f34a267d744388a2755bb1829823d57_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_5f34a267d744388a2755bb1829823d57_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 09257a1c177c5cb6b46e3f75a24406c3cafbb56b9efc0c5c82f607c791f81419
- MD5 5f34a267d744388a2755bb1829823d57
- SHA1 877198a4bac574e30bf252473040f5bb9e207e62
- SHA512 ad52e9b50e785ab54c9aaaea129829fd33c87cbdf1e0756110309ff02eefc4549c97de359cfac7f7132519095550d42953e42468395ce13039eeaa25c92b98e0
- SSDEEP 49152:18YncCyEq9DRho/ctH01Ws74rA4RUBDHgE3dqFWV+4O8b8ITDnl/M6q:GO5qFb0I+0PqkWdM
- TLSH T145B5AE312590CE26E3EF763089614E6435176C154EE84BCB6382FF8B7BB22B5DD66207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory