General
- Target 2026-08-19_630699e74746a10e135d91ba6bdaf82b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- Sample260819-x3beda1gkd
- SHA256 11b55e6830002c16965c499b2f85c1b7ac0ca5d7173109ab8330d225dae5ff37
- MD5 630699e74746a10e135d91ba6bdaf82b
- SHA1 0b1d380fc1beee5c49b36ba34565e5546c73d69c
- SHA512 827f947ba80d175e2244414b83e50da579b1929f9ea447a4d3a5662f41174d0e67df4ba2b24c66c19f59b1f4441903d8c8e15cc323f1550dd50f4ad121874ef1
- SSDEEP 12288:hwKfOVRo9yRYQkLmI4O8b8ITDnl5U1Ajg1:hxWVeyRYQkLmI4O8b8ITDnl5g1
- TLSH T14E25E822F3E84114F1F37B3099B94E606A377C516EB5C29E3288374E5E75AA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_630699e74746a10e135d91ba6bdaf82b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_630699e74746a10e135d91ba6bdaf82b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_630699e74746a10e135d91ba6bdaf82b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- SHA256 11b55e6830002c16965c499b2f85c1b7ac0ca5d7173109ab8330d225dae5ff37
- MD5 630699e74746a10e135d91ba6bdaf82b
- SHA1 0b1d380fc1beee5c49b36ba34565e5546c73d69c
- SHA512 827f947ba80d175e2244414b83e50da579b1929f9ea447a4d3a5662f41174d0e67df4ba2b24c66c19f59b1f4441903d8c8e15cc323f1550dd50f4ad121874ef1
- SSDEEP 12288:hwKfOVRo9yRYQkLmI4O8b8ITDnl5U1Ajg1:hxWVeyRYQkLmI4O8b8ITDnl5g1
- TLSH T14E25E822F3E84114F1F37B3099B94E606A377C516EB5C29E3288374E5E75AA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory