General
- Target 2026-08-19_f12867e23cbc78b0641862137560a37c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260819-ves86sycrg
- SHA256 ea076cadc86798d82f0f642187242150e31c7a8943ecdef62d27d1b8b8bb6f7c
- MD5 f12867e23cbc78b0641862137560a37c
- SHA1 e1062569b5d774b4730157e0fd80bdbb09ef3b2f
- SHA512 9971c6d6c7d631ccaa930d458aac14887ab4cb19c087604a05a8d0ea7623d4caa47abf19815f1056deb954eedc2b207d35afd0ed7b86bcc9286bd6afbcb7f867
- SSDEEP 12288:/wKfOVRo9yRYDQ7O4O8b8ITDnlz00BhOqaYkiUOdj:/xWVeyRYDQ7O4O8b8ITDnld3/Xdj
- TLSH T14B35A53263E98604F1F73F7099B95AB466277C156F79C6CFA6443B0E6931AA0D821333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f12867e23cbc78b0641862137560a37c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f12867e23cbc78b0641862137560a37c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f12867e23cbc78b0641862137560a37c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 ea076cadc86798d82f0f642187242150e31c7a8943ecdef62d27d1b8b8bb6f7c
- MD5 f12867e23cbc78b0641862137560a37c
- SHA1 e1062569b5d774b4730157e0fd80bdbb09ef3b2f
- SHA512 9971c6d6c7d631ccaa930d458aac14887ab4cb19c087604a05a8d0ea7623d4caa47abf19815f1056deb954eedc2b207d35afd0ed7b86bcc9286bd6afbcb7f867
- SSDEEP 12288:/wKfOVRo9yRYDQ7O4O8b8ITDnlz00BhOqaYkiUOdj:/xWVeyRYDQ7O4O8b8ITDnld3/Xdj
- TLSH T14B35A53263E98604F1F73F7099B95AB466277C156F79C6CFA6443B0E6931AA0D821333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory