General
- Target 2026-08-18_3134de8f80889dd0b560245cc00ebfc3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260818-ww7cssxgng
- SHA256 f29ba2901ea3cd05abea469e8fbcdf70103e1973c5f54178a86e6ec4e6d25192
- MD5 3134de8f80889dd0b560245cc00ebfc3
- SHA1 2da437903c49fb2cac6fa626aae6010d449868fe
- SHA512 6fbeca5428fa28c9d68c270bec02945b60bc24e8191d8b8f4139077ac82d5c9c1c01765e5ed59be190a4e29ecffe68e23641ede9a16b22797b00f7186d14e373
- SSDEEP 12288:kwKfOVRo9yRYdc4O8b8ITDnl10VX1GoFQtx:kxWVeyRYdc4O8b8ITDnluotx
- TLSH T16B65962177E4D515F2F33B309DB54AA42A267C116EF5C64F2342B74F2AB1AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_3134de8f80889dd0b560245cc00ebfc3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_3134de8f80889dd0b560245cc00ebfc3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_3134de8f80889dd0b560245cc00ebfc3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 f29ba2901ea3cd05abea469e8fbcdf70103e1973c5f54178a86e6ec4e6d25192
- MD5 3134de8f80889dd0b560245cc00ebfc3
- SHA1 2da437903c49fb2cac6fa626aae6010d449868fe
- SHA512 6fbeca5428fa28c9d68c270bec02945b60bc24e8191d8b8f4139077ac82d5c9c1c01765e5ed59be190a4e29ecffe68e23641ede9a16b22797b00f7186d14e373
- SSDEEP 12288:kwKfOVRo9yRYdc4O8b8ITDnl10VX1GoFQtx:kxWVeyRYdc4O8b8ITDnluotx
- TLSH T16B65962177E4D515F2F33B309DB54AA42A267C116EF5C64F2342B74F2AB1AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory