General
- Target 2026-08-20_124b6392c4c40192f5e49566ebf69402_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260820-wwkh2atalg
- SHA256 708c853656d47151b8fbc8389c302ab8d5bde0592d0be0e9ab0bb96920d5d4d6
- MD5 124b6392c4c40192f5e49566ebf69402
- SHA1 84531529cb7098a4902b90c843330ab2ee076c7a
- SHA512 1828ac66b34d5d9232124c5595ae2c2c4ca8c144df73fc910c1cf5027251365ce60b7c5449cd94c0811bbadfda3e08cf1e9228d7b724ab8c15844968169b7971
- SSDEEP 12288:3wKfOVRo9yRY+Q7O4O8b8ITDnlz00BhOqaYkiUOds:3xWVeyRY+Q7O4O8b8ITDnld3/Xds
- TLSH T12535A53263E98604F1F73F7099B95AB466277C156F79C6CFA6443B0E6931AA0D821333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_124b6392c4c40192f5e49566ebf69402_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_124b6392c4c40192f5e49566ebf69402_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_124b6392c4c40192f5e49566ebf69402_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 708c853656d47151b8fbc8389c302ab8d5bde0592d0be0e9ab0bb96920d5d4d6
- MD5 124b6392c4c40192f5e49566ebf69402
- SHA1 84531529cb7098a4902b90c843330ab2ee076c7a
- SHA512 1828ac66b34d5d9232124c5595ae2c2c4ca8c144df73fc910c1cf5027251365ce60b7c5449cd94c0811bbadfda3e08cf1e9228d7b724ab8c15844968169b7971
- SSDEEP 12288:3wKfOVRo9yRY+Q7O4O8b8ITDnlz00BhOqaYkiUOds:3xWVeyRY+Q7O4O8b8ITDnld3/Xds
- TLSH T12535A53263E98604F1F73F7099B95AB466277C156F79C6CFA6443B0E6931AA0D821333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory