General
- Target 2026-08-20_3fa9253f5b3df7cd807c9679ffef1c5a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260820-1xgwrawdnf
- SHA256 e70b8faffab7510b49a32d076821fd69bf52f557aefaef9c3aaa211abb023dbe
- MD5 3fa9253f5b3df7cd807c9679ffef1c5a
- SHA1 1e2c6e8b0950ef5a91485fa80929669843370d56
- SHA512 0acbde892957609684a79212ed713f95eee023c28f2d8100071e3d9a6c794ea614db470ba8f146a46c29e9338f63d4329ce2b6903de46d705b2df93b2cfd8581
- SSDEEP 24576:MxWVeyRYDqwzYDteYIpLPLmY4O8b8ITDnlxKk1+8M:M8YHX4O8b8ITDnlgk1+n
- TLSH T100855E6063E0CE11F2FFAE3054756E26252BBC125EA583DE2215BF4E3DB1650EE21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_3fa9253f5b3df7cd807c9679ffef1c5a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_3fa9253f5b3df7cd807c9679ffef1c5a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_3fa9253f5b3df7cd807c9679ffef1c5a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 e70b8faffab7510b49a32d076821fd69bf52f557aefaef9c3aaa211abb023dbe
- MD5 3fa9253f5b3df7cd807c9679ffef1c5a
- SHA1 1e2c6e8b0950ef5a91485fa80929669843370d56
- SHA512 0acbde892957609684a79212ed713f95eee023c28f2d8100071e3d9a6c794ea614db470ba8f146a46c29e9338f63d4329ce2b6903de46d705b2df93b2cfd8581
- SSDEEP 24576:MxWVeyRYDqwzYDteYIpLPLmY4O8b8ITDnlxKk1+8M:M8YHX4O8b8ITDnlgk1+n
- TLSH T100855E6063E0CE11F2FFAE3054756E26252BBC125EA583DE2215BF4E3DB1650EE21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory