General
- Target 2026-08-21_f5c9300c01491e44bdea9fb072e8beba_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260822-ab7beayhqf
- SHA256 4e7ce02112c7d9be90957de6c921abc551f2b7a809015aeb0fe3521fa1350df3
- MD5 f5c9300c01491e44bdea9fb072e8beba
- SHA1 c38a84d576c2f831157669e2f8ce11c54f8b8320
- SHA512 49403e39745fafe092cd97fc28cb816d11a3f9716fbe065a839d67a09b77df039db16fa5215600b1979c981b01f39b2dfbf073ba338cc2d5bbe899d294b45627
- SSDEEP 12288:7wKfOVRo9yRYFrc4O8b8ITDnljFF0eaHJKkEq4bpG:7xWVeyRYtc4O8b8ITDnljFBaMG
- TLSH T197458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_f5c9300c01491e44bdea9fb072e8beba_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f5c9300c01491e44bdea9fb072e8beba_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_f5c9300c01491e44bdea9fb072e8beba_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 4e7ce02112c7d9be90957de6c921abc551f2b7a809015aeb0fe3521fa1350df3
- MD5 f5c9300c01491e44bdea9fb072e8beba
- SHA1 c38a84d576c2f831157669e2f8ce11c54f8b8320
- SHA512 49403e39745fafe092cd97fc28cb816d11a3f9716fbe065a839d67a09b77df039db16fa5215600b1979c981b01f39b2dfbf073ba338cc2d5bbe899d294b45627
- SSDEEP 12288:7wKfOVRo9yRYFrc4O8b8ITDnljFF0eaHJKkEq4bpG:7xWVeyRYtc4O8b8ITDnljFBaMG
- TLSH T197458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory