General
- Target 2026-08-19_55e0d0d46ac836706519c2757f8aac48_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260819-kcvdcagl41
- SHA256 74730fe16a07aad0f335a0577accb505351f3f30d6736210ed5e351946809548
- MD5 55e0d0d46ac836706519c2757f8aac48
- SHA1 e81187692a38f50eba714fe0942f16ef7466ed24
- SHA512 802f09b30624d29b2f050e9cf07e69e0677f9b607a9540b3ff370a758106ccf056cc09b6256e63f75e5dd2d90bdb2efa4c0d975c26075e9a1067bb6616295e79
- SSDEEP 24576:1xWVeyRYDO1u4O8b8ITDnljFCMNTmXjmXI/rkraxCXE9:18Y74O8b8ITDnljFzNToB/IGxCA
- TLSH T13B653C62B2D8C025F4B62B348D7B8EA02A26BC155FB5864F3744371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_55e0d0d46ac836706519c2757f8aac48_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_55e0d0d46ac836706519c2757f8aac48_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_55e0d0d46ac836706519c2757f8aac48_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 74730fe16a07aad0f335a0577accb505351f3f30d6736210ed5e351946809548
- MD5 55e0d0d46ac836706519c2757f8aac48
- SHA1 e81187692a38f50eba714fe0942f16ef7466ed24
- SHA512 802f09b30624d29b2f050e9cf07e69e0677f9b607a9540b3ff370a758106ccf056cc09b6256e63f75e5dd2d90bdb2efa4c0d975c26075e9a1067bb6616295e79
- SSDEEP 24576:1xWVeyRYDO1u4O8b8ITDnljFCMNTmXjmXI/rkraxCXE9:18Y74O8b8ITDnljFzNToB/IGxCA
- TLSH T13B653C62B2D8C025F4B62B348D7B8EA02A26BC155FB5864F3744371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory