General
- Target 2026-08-22_9a290fa92de93464332bb4717cc23f33_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 861KB
- Sample260823-etvsjsxvew
- SHA256 265e1cd81cc6b4979107467c3a699775f6130b3e8b0de73bfba1797d316b947a
- MD5 9a290fa92de93464332bb4717cc23f33
- SHA1 5f71738052ffe8b88d651477b6757191d2b2ba31
- SHA512 b4d4e72056407254c60312a7de9cef3a39a9021ab7bd13c16c3668bff17b1d48928109b3b9d74f56ac3353d05b628a44aa886c2c10c92f6eae017472e7404246
- SSDEEP 12288:uwKfOVRo9yRYI6z4O8b8ITDnljFF0GEq8X:uxWVeyRYPz4O8b8ITDnljF2X
- TLSH T11115D831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_9a290fa92de93464332bb4717cc23f33_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_9a290fa92de93464332bb4717cc23f33_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_9a290fa92de93464332bb4717cc23f33_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 861KB
- SHA256 265e1cd81cc6b4979107467c3a699775f6130b3e8b0de73bfba1797d316b947a
- MD5 9a290fa92de93464332bb4717cc23f33
- SHA1 5f71738052ffe8b88d651477b6757191d2b2ba31
- SHA512 b4d4e72056407254c60312a7de9cef3a39a9021ab7bd13c16c3668bff17b1d48928109b3b9d74f56ac3353d05b628a44aa886c2c10c92f6eae017472e7404246
- SSDEEP 12288:uwKfOVRo9yRYI6z4O8b8ITDnljFF0GEq8X:uxWVeyRYPz4O8b8ITDnljF2X
- TLSH T11115D831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory