General
- Target 2026-08-21_c989a4b0cc0ef2da36e2cd2cec570754_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- Sample260822-glbqta1fmb
- SHA256 430fcbf52328bd1eb40c761d019e08bda0e74e5a33957d4a5d2c07f8349a921f
- MD5 c989a4b0cc0ef2da36e2cd2cec570754
- SHA1 8af61935baebd9cf5416290dc6bea26e72ad5742
- SHA512 80ba2a12fab1b622de4e6f43383733e202adb980065ac1634c3add247e528397aa32bf72992486f71e29a06418858da2540136c80a0a1de7f6edfe86c6b2aee8
- SSDEEP 12288:RwKfOVRo9yRY5dz4O8b8ITDnljFF0XLYQqLWp8Eqp:RxWVeyRYfz4O8b8ITDnljFYYJLSS
- TLSH T191250A31B2E4C025E4B63B348D768EE43A26BC126EB5C24F36547B5E6F716B0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_c989a4b0cc0ef2da36e2cd2cec570754_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_c989a4b0cc0ef2da36e2cd2cec570754_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_c989a4b0cc0ef2da36e2cd2cec570754_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 965KB
- SHA256 430fcbf52328bd1eb40c761d019e08bda0e74e5a33957d4a5d2c07f8349a921f
- MD5 c989a4b0cc0ef2da36e2cd2cec570754
- SHA1 8af61935baebd9cf5416290dc6bea26e72ad5742
- SHA512 80ba2a12fab1b622de4e6f43383733e202adb980065ac1634c3add247e528397aa32bf72992486f71e29a06418858da2540136c80a0a1de7f6edfe86c6b2aee8
- SSDEEP 12288:RwKfOVRo9yRY5dz4O8b8ITDnljFF0XLYQqLWp8Eqp:RxWVeyRYfz4O8b8ITDnljFYYJLSS
- TLSH T191250A31B2E4C025E4B63B348D768EE43A26BC126EB5C24F36547B5E6F716B0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory