General
- Target 2026-08-23_40732242f9464afc3eea99221759afb4_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 939KB
- Sample260824-qjs2ragp9x
- SHA256 e78bc28a2d07f34aa0b70b478e7f60aa6e3602439e1c0cacef23980cde30f128
- MD5 40732242f9464afc3eea99221759afb4
- SHA1 c5362440010e3a08bec77b8e8c835ffdd61e6e16
- SHA512 d14555efc43d88d70027429b3c4b8f4438e8856bdf909b6d3bffedb9564ef7c32be251c9ee6edb4521ca0ffba3f83ef28b41b50101c722102347e3c913552056
- SSDEEP 12288:uwKfOVRo9yRYdOz4O8b8ITDnlNFF0E+X+IYREqcE:uxWVeyRYdOz4O8b8ITDnlNFH45E
- TLSH T15615E921B3E4C025F4B67B344D768EA47A76BC226EB5C24F3684371D6F316A0DD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_40732242f9464afc3eea99221759afb4_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_40732242f9464afc3eea99221759afb4_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_40732242f9464afc3eea99221759afb4_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 939KB
- SHA256 e78bc28a2d07f34aa0b70b478e7f60aa6e3602439e1c0cacef23980cde30f128
- MD5 40732242f9464afc3eea99221759afb4
- SHA1 c5362440010e3a08bec77b8e8c835ffdd61e6e16
- SHA512 d14555efc43d88d70027429b3c4b8f4438e8856bdf909b6d3bffedb9564ef7c32be251c9ee6edb4521ca0ffba3f83ef28b41b50101c722102347e3c913552056
- SSDEEP 12288:uwKfOVRo9yRYdOz4O8b8ITDnlNFF0E+X+IYREqcE:uxWVeyRYdOz4O8b8ITDnlNFH45E
- TLSH T15615E921B3E4C025F4B67B344D768EA47A76BC226EB5C24F3684371D6F316A0DD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory