General
- Target 2026-08-20_9f5545587a138379e0fe92f8ff779484_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260820-3pgbcsxenh
- SHA256 7ea8ea409e5a6f818cbb0503c084f30b7c22fe0f26b02367d043a1836f0ec185
- MD5 9f5545587a138379e0fe92f8ff779484
- SHA1 919ab7565bb378f72860184bec9ca9d7ed157c1f
- SHA512 637f5f9ff004ee7f1ba5a9ef78dfffe6352f5ffeac0209d29ab64f2d96c6a022ae5b3da7e29e6c5e9bad28deb60a7e4221bbca300d8e4f13646bb36f6a651b7c
- SSDEEP 24576:DxWVeyRYRqwzYDteYIpLPLmz4O8b8ITDnl9SplZY0/8TX+w:D8YJ44O8b8ITDnlUp3IX+w
- TLSH T1D385805063E0CE15F2FFAE3048766E21192ABC525DB583DE1215BB4E3DB2750EE2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_9f5545587a138379e0fe92f8ff779484_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9f5545587a138379e0fe92f8ff779484_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9f5545587a138379e0fe92f8ff779484_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 7ea8ea409e5a6f818cbb0503c084f30b7c22fe0f26b02367d043a1836f0ec185
- MD5 9f5545587a138379e0fe92f8ff779484
- SHA1 919ab7565bb378f72860184bec9ca9d7ed157c1f
- SHA512 637f5f9ff004ee7f1ba5a9ef78dfffe6352f5ffeac0209d29ab64f2d96c6a022ae5b3da7e29e6c5e9bad28deb60a7e4221bbca300d8e4f13646bb36f6a651b7c
- SSDEEP 24576:DxWVeyRYRqwzYDteYIpLPLmz4O8b8ITDnl9SplZY0/8TX+w:D8YJ44O8b8ITDnlUp3IX+w
- TLSH T1D385805063E0CE15F2FFAE3048766E21192ABC525DB583DE1215BB4E3DB2750EE2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory