General
- Target 2026-08-22_8fb0666e677c6da674b965852e12676a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260823-fm7dfasgrf
- SHA256 b395180f13413bad1a6c3dba5021ebc2cbf6474245ea8b04d777c31958c8d106
- MD5 8fb0666e677c6da674b965852e12676a
- SHA1 4b8dea67b868acdc73b8cdaa2de09a1f9c097125
- SHA512 847e5aaa51f59904e593d40a763831c82d3b4418e588470e62f86d41dba568b77392149503eacd5f65d49e55b34512b4023730c7b07b0241611980f78f685fe7
- SSDEEP 12288:bwKfOVRo9yRYUAI4O8b8ITDnlnFF0PNl7qL:bxWVeyRYUAI4O8b8ITDnlnFI0
- TLSH T1F845C622B3E98115F5F73B309DB64AA02A677C616E79C64F3684370E1E70BA0DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_8fb0666e677c6da674b965852e12676a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_8fb0666e677c6da674b965852e12676a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_8fb0666e677c6da674b965852e12676a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 b395180f13413bad1a6c3dba5021ebc2cbf6474245ea8b04d777c31958c8d106
- MD5 8fb0666e677c6da674b965852e12676a
- SHA1 4b8dea67b868acdc73b8cdaa2de09a1f9c097125
- SHA512 847e5aaa51f59904e593d40a763831c82d3b4418e588470e62f86d41dba568b77392149503eacd5f65d49e55b34512b4023730c7b07b0241611980f78f685fe7
- SSDEEP 12288:bwKfOVRo9yRYUAI4O8b8ITDnlnFF0PNl7qL:bxWVeyRYUAI4O8b8ITDnlnFI0
- TLSH T1F845C622B3E98115F5F73B309DB64AA02A677C616E79C64F3684370E1E70BA0DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory