General
- Target 2026-08-20_a595d360e39b599eb46337dd9bc1c518_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1015KB
- Sample260820-vyaaeavxdy
- SHA256 8828c233235360b3e98d31a0675f316a1052cfcffd4d9c4cffc5e86a6ac8dfa5
- MD5 a595d360e39b599eb46337dd9bc1c518
- SHA1 5ac9cc3dcd3d794c5483678014b14d843d457611
- SHA512 3fcefc016484f2ba18f2c5b86b8576d84803ab69278d0ea2e0d57a63987990459c88e6677af8d0631ea7bc01b1be2d3ab7e87dd0f2b56f9d6bcfc423602179bb
- SSDEEP 12288:iwKfOVRo9yRYLgQ7O4O8b8ITDnlz0kU1DGrAaYdiUdpb:ixWVeyRYcQ7O4O8b8ITDnl3Mpb
- TLSH T16C25B43263E94015F1F33F709EB99AB46A267C166FB9C54F6644370E4A31AA0DD22733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a595d360e39b599eb46337dd9bc1c518_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a595d360e39b599eb46337dd9bc1c518_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a595d360e39b599eb46337dd9bc1c518_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1015KB
- SHA256 8828c233235360b3e98d31a0675f316a1052cfcffd4d9c4cffc5e86a6ac8dfa5
- MD5 a595d360e39b599eb46337dd9bc1c518
- SHA1 5ac9cc3dcd3d794c5483678014b14d843d457611
- SHA512 3fcefc016484f2ba18f2c5b86b8576d84803ab69278d0ea2e0d57a63987990459c88e6677af8d0631ea7bc01b1be2d3ab7e87dd0f2b56f9d6bcfc423602179bb
- SSDEEP 12288:iwKfOVRo9yRYLgQ7O4O8b8ITDnlz0kU1DGrAaYdiUdpb:ixWVeyRYcQ7O4O8b8ITDnl3Mpb
- TLSH T16C25B43263E94015F1F33F709EB99AB46A267C166FB9C54F6644370E4A31AA0DD22733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory