General
- Target 2026-08-19_dd67e8f78750acd6c1b19b1164499085_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- Sample260819-vrr7msyfma
- SHA256 2f9de01ee08b2d85df967a39937af53974e564e6ee3ac3657ea9637ded41a0e3
- MD5 dd67e8f78750acd6c1b19b1164499085
- SHA1 5c5290f2207de4f650060ff39259d4f9f15cc740
- SHA512 a37c1df67ff99363544ad4c4ea94a5c1bec54b73131146740e75e62e8692a98d1459a67dc57dbedff5bb421436c894578deda5dc4a14729f1299abfdcf6c0455
- SSDEEP 12288:5wKfOVRo9yRY+kLmI4O8b8ITDnl5U1Ajg+:5xWVeyRY+kLmI4O8b8ITDnl5g+
- TLSH T11725E822F3E84114F1F37B3099B94E606A377C516EB5C29E3288374E5E75AA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_dd67e8f78750acd6c1b19b1164499085_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_dd67e8f78750acd6c1b19b1164499085_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_dd67e8f78750acd6c1b19b1164499085_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- SHA256 2f9de01ee08b2d85df967a39937af53974e564e6ee3ac3657ea9637ded41a0e3
- MD5 dd67e8f78750acd6c1b19b1164499085
- SHA1 5c5290f2207de4f650060ff39259d4f9f15cc740
- SHA512 a37c1df67ff99363544ad4c4ea94a5c1bec54b73131146740e75e62e8692a98d1459a67dc57dbedff5bb421436c894578deda5dc4a14729f1299abfdcf6c0455
- SSDEEP 12288:5wKfOVRo9yRY+kLmI4O8b8ITDnl5U1Ajg+:5xWVeyRY+kLmI4O8b8ITDnl5g+
- TLSH T11725E822F3E84114F1F37B3099B94E606A377C516EB5C29E3288374E5E75AA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory