General
- Target 2026-08-21_995ac1c2237cdc1cecd25f96a169508c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260822-lvtefaxwas
- SHA256 866a160d6bce9c0ec4d4e7583fadf820878b389ee2cbdc416fe4853bde49e804
- MD5 995ac1c2237cdc1cecd25f96a169508c
- SHA1 1fa8991e2048ee33dc06ff84ba56b4f606a900c4
- SHA512 1a24a1cb48ad791cb7605f78c5662a2a73e8d68533e0b96804e2921ad44986933a0d1d613a4244ec4df616858c17e4f5aeb2ed7fc49a4c5053059b26a2141844
- SSDEEP 24576:GxWVeyR+jHdF1+nLZWMHq4O8b8ITDnl6yqxC:G8+Iq4O8b8ITDnl6yqM
- TLSH T16AB54160B2E4C915F2F63B309D758AA41A25BC11ADF8878F2342FB4F7EB1654DD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_995ac1c2237cdc1cecd25f96a169508c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_995ac1c2237cdc1cecd25f96a169508c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_995ac1c2237cdc1cecd25f96a169508c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 866a160d6bce9c0ec4d4e7583fadf820878b389ee2cbdc416fe4853bde49e804
- MD5 995ac1c2237cdc1cecd25f96a169508c
- SHA1 1fa8991e2048ee33dc06ff84ba56b4f606a900c4
- SHA512 1a24a1cb48ad791cb7605f78c5662a2a73e8d68533e0b96804e2921ad44986933a0d1d613a4244ec4df616858c17e4f5aeb2ed7fc49a4c5053059b26a2141844
- SSDEEP 24576:GxWVeyR+jHdF1+nLZWMHq4O8b8ITDnl6yqxC:G8+Iq4O8b8ITDnl6yqM
- TLSH T16AB54160B2E4C915F2F63B309D758AA41A25BC11ADF8878F2342FB4F7EB1654DD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory