General
- Target 2026-08-21_b181f3a3a1c000cd723d42c583ed935e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260822-jp2grafn91
- SHA256 fd7f943e3a0da9e5a6b7b8e9af4c605cdb36a30ec761fe5f3b76400bed9b2019
- MD5 b181f3a3a1c000cd723d42c583ed935e
- SHA1 d0929e7c36855ece43e449142b51f9df697aebb0
- SHA512 72575996484c2bc56cef5d804dfda42116a314f5c1f6d1a26e4690715d35e460d809dc3328ea6fb8bbdc009f3610e873499319148dd31a489bf8ee9117cd453d
- SSDEEP 24576:6xWVeyRY1qwzYDteYIpLPLmz4O8b8ITDnl5kQ1+B:68YN44O8b8ITDnliQ1+B
- TLSH T1CD755E2163E0CE11F2FFAE3058756E26292BBC115DA583DE2215BB4E3DB1750EE21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_b181f3a3a1c000cd723d42c583ed935e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_b181f3a3a1c000cd723d42c583ed935e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_b181f3a3a1c000cd723d42c583ed935e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 fd7f943e3a0da9e5a6b7b8e9af4c605cdb36a30ec761fe5f3b76400bed9b2019
- MD5 b181f3a3a1c000cd723d42c583ed935e
- SHA1 d0929e7c36855ece43e449142b51f9df697aebb0
- SHA512 72575996484c2bc56cef5d804dfda42116a314f5c1f6d1a26e4690715d35e460d809dc3328ea6fb8bbdc009f3610e873499319148dd31a489bf8ee9117cd453d
- SSDEEP 24576:6xWVeyRY1qwzYDteYIpLPLmz4O8b8ITDnl5kQ1+B:68YN44O8b8ITDnliQ1+B
- TLSH T1CD755E2163E0CE11F2FFAE3058756E26292BBC115DA583DE2215BB4E3DB1750EE21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory