General
- Target 2026-08-19_94383baace4738fd5440f5b95855a298_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260819-jzqs1adh72
- SHA256 36a602ac7bf53f5af11e0419de6b4377e259e8691b6eb845f3de3500d40340cc
- MD5 94383baace4738fd5440f5b95855a298
- SHA1 5e278c983c6c92c6ac1521f0ae3f6eb18d0d88b4
- SHA512 6a6659c070e3e5401ebb8b1f50b74e237b3d1ca6b91a8db7daa8ced953b41c08f94932e1e711922107c8b96fdd61675fdb0f952db8311ac7943bddb91146a033
- SSDEEP 6144:5wynAtMrOVRkidy9yIGWlUimMVDE4O8b8ITDnlznZNq4uonA7HmPE:5wKfOVRo9yRYYJ4O8b8ITDnlP6onYGPE
- TLSH T1024580317590DE26E2AB323098618EA835176C154ED44BCB6387FF4F7BB22B5DD26207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_94383baace4738fd5440f5b95855a298_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_94383baace4738fd5440f5b95855a298_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_94383baace4738fd5440f5b95855a298_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 36a602ac7bf53f5af11e0419de6b4377e259e8691b6eb845f3de3500d40340cc
- MD5 94383baace4738fd5440f5b95855a298
- SHA1 5e278c983c6c92c6ac1521f0ae3f6eb18d0d88b4
- SHA512 6a6659c070e3e5401ebb8b1f50b74e237b3d1ca6b91a8db7daa8ced953b41c08f94932e1e711922107c8b96fdd61675fdb0f952db8311ac7943bddb91146a033
- SSDEEP 6144:5wynAtMrOVRkidy9yIGWlUimMVDE4O8b8ITDnlznZNq4uonA7HmPE:5wKfOVRo9yRYYJ4O8b8ITDnlP6onYGPE
- TLSH T1024580317590DE26E2AB323098618EA835176C154ED44BCB6387FF4F7BB22B5DD26207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory