General
- Target 2026-08-18_b5ee1ca8edf7ebf85c5dc2e46a5d0d21_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 828KB
- Sample260818-vja86awflb
- SHA256 882fe4782755465078ba072a20408acc3ae11e4952904a877acaa1a5807f14de
- MD5 b5ee1ca8edf7ebf85c5dc2e46a5d0d21
- SHA1 d1bd2ad4744090849a98680dbe5b8c5e6a5c2fe0
- SHA512 a547b5d97598585782911d53186a36d9dd1b3a3a5afe1a5f77e4697fdc6276ffd0223b2060ae3b85120295091914616e890162cfc65d5bd19c7142013d8a2de8
- SSDEEP 12288:TwKfOVRo9yRYK/79744O8b8ITDnlGJ03V/SLY6:TxWVeyRYK/79744O8b8ITDnlY03N6
- TLSH T1D305F87196D44A66E87B7B30C5709E642A27BD90AEF587CE22843F1C7E706A0CC21777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_b5ee1ca8edf7ebf85c5dc2e46a5d0d21_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_b5ee1ca8edf7ebf85c5dc2e46a5d0d21_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_b5ee1ca8edf7ebf85c5dc2e46a5d0d21_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 828KB
- SHA256 882fe4782755465078ba072a20408acc3ae11e4952904a877acaa1a5807f14de
- MD5 b5ee1ca8edf7ebf85c5dc2e46a5d0d21
- SHA1 d1bd2ad4744090849a98680dbe5b8c5e6a5c2fe0
- SHA512 a547b5d97598585782911d53186a36d9dd1b3a3a5afe1a5f77e4697fdc6276ffd0223b2060ae3b85120295091914616e890162cfc65d5bd19c7142013d8a2de8
- SSDEEP 12288:TwKfOVRo9yRYK/79744O8b8ITDnlGJ03V/SLY6:TxWVeyRYK/79744O8b8ITDnlY03N6
- TLSH T1D305F87196D44A66E87B7B30C5709E642A27BD90AEF587CE22843F1C7E706A0CC21777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory