General
- Target 2026-08-23_5efc1ba9fad2041a8fb71ae2b29b23a0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260824-mtz19sda66
- SHA256 fc70b321cb8bd24398078ab7e700b5daa326ff706f9c6883d394744c379ae4cc
- MD5 5efc1ba9fad2041a8fb71ae2b29b23a0
- SHA1 20b36a75a5e8f450feebd0f61da504bdeac1e533
- SHA512 6f3814335949cf87f549bc074ec2f62d1c6e834dafbed15e37ef34bef920f3bb83ca485ae3aec1cb81ed762c3cb401962c0ea2ac6f2bc471aa347a5f5efe4e22
- SSDEEP 12288:JwKfOVRo9yRYWd797J4O8b8ITDnlA03V/SLkoUYPQ:JxWVeyRYWd797J4O8b8ITDnlA039hYPQ
- TLSH T18A45D52297EC9516F9FB6B30D5709A611A37BDA2ADB88B8D21443F1D3DB0660CC21737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_5efc1ba9fad2041a8fb71ae2b29b23a0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_5efc1ba9fad2041a8fb71ae2b29b23a0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_5efc1ba9fad2041a8fb71ae2b29b23a0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 fc70b321cb8bd24398078ab7e700b5daa326ff706f9c6883d394744c379ae4cc
- MD5 5efc1ba9fad2041a8fb71ae2b29b23a0
- SHA1 20b36a75a5e8f450feebd0f61da504bdeac1e533
- SHA512 6f3814335949cf87f549bc074ec2f62d1c6e834dafbed15e37ef34bef920f3bb83ca485ae3aec1cb81ed762c3cb401962c0ea2ac6f2bc471aa347a5f5efe4e22
- SSDEEP 12288:JwKfOVRo9yRYWd797J4O8b8ITDnlA03V/SLkoUYPQ:JxWVeyRYWd797J4O8b8ITDnlA039hYPQ
- TLSH T18A45D52297EC9516F9FB6B30D5709A611A37BDA2ADB88B8D21443F1D3DB0660CC21737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory