General
- Target 2026-08-21_1e924a4a02278cd68f375f3cdfa2519c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260822-wswf5axeke
- SHA256 7dc88c624b7d2810a49c5da9836b1bd54a32866c9bce6b505da243469930767a
- MD5 1e924a4a02278cd68f375f3cdfa2519c
- SHA1 9bcdc0f97c9962b19406f8f199c130b992f10c1c
- SHA512 83fc75d2eb5fac4d2d419c153ae5ec0afe220444984b55278354efbb47c8857656d87b2440ada6b08ae0afd711cc76d1aa65f4f291173ae08ee9e5674631a3b8
- SSDEEP 24576:GxWVeyRYojqwzYDteYIpLPLmz4O8b8ITDnlXkQ1+i:G8Y044O8b8ITDnlUQ1+i
- TLSH T1F5756E2163E0CE10F2FFAE3048756E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_1e924a4a02278cd68f375f3cdfa2519c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_1e924a4a02278cd68f375f3cdfa2519c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_1e924a4a02278cd68f375f3cdfa2519c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 7dc88c624b7d2810a49c5da9836b1bd54a32866c9bce6b505da243469930767a
- MD5 1e924a4a02278cd68f375f3cdfa2519c
- SHA1 9bcdc0f97c9962b19406f8f199c130b992f10c1c
- SHA512 83fc75d2eb5fac4d2d419c153ae5ec0afe220444984b55278354efbb47c8857656d87b2440ada6b08ae0afd711cc76d1aa65f4f291173ae08ee9e5674631a3b8
- SSDEEP 24576:GxWVeyRYojqwzYDteYIpLPLmz4O8b8ITDnlXkQ1+i:G8Y044O8b8ITDnlUQ1+i
- TLSH T1F5756E2163E0CE10F2FFAE3048756E26292BBC515DA583DE2215BF4E3DB1650EE25727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory