General
- Target 2026-08-19_928f74a0011e8b3da5b8139325a83293_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 588KB
- Sample260819-j1er5adh74
- SHA256 e7d46458f3ca8a7b6b5875a5b06f2783d4dd7d3c3764102e09986cca14faced0
- MD5 928f74a0011e8b3da5b8139325a83293
- SHA1 22183b387fe1b252fe806cbb3ad98a998d650e92
- SHA512 9d0762ef5042cb97022ee210365d449a60298d4cb8bf6aafda96c7776014c0c1f5d96e0a4d6849f5957d8bb320a62e0e65f27d57720e5c02b4690cb208ba3b8d
- SSDEEP 12288:XwKfOVRo9yRY6N797B4O8b8ITDnl/SQWQs/SLBP:XxWVeyRY6N797B4O8b8ITDnl/HrVP
- TLSH T1B7D4273162908F36E82F7A3085A18E607A2BBD615FE147CB32847F197F716B1CD2561B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_928f74a0011e8b3da5b8139325a83293_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_928f74a0011e8b3da5b8139325a83293_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_928f74a0011e8b3da5b8139325a83293_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 588KB
- SHA256 e7d46458f3ca8a7b6b5875a5b06f2783d4dd7d3c3764102e09986cca14faced0
- MD5 928f74a0011e8b3da5b8139325a83293
- SHA1 22183b387fe1b252fe806cbb3ad98a998d650e92
- SHA512 9d0762ef5042cb97022ee210365d449a60298d4cb8bf6aafda96c7776014c0c1f5d96e0a4d6849f5957d8bb320a62e0e65f27d57720e5c02b4690cb208ba3b8d
- SSDEEP 12288:XwKfOVRo9yRY6N797B4O8b8ITDnl/SQWQs/SLBP:XxWVeyRY6N797B4O8b8ITDnl/HrVP
- TLSH T1B7D4273162908F36E82F7A3085A18E607A2BBD615FE147CB32847F197F716B1CD2561B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory