General
- Target 2026-08-23_9be1d54e3125ad20200ec4a8b791c643_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260825-23se4sw1f1
- SHA256 dba8b4f1514d00c7c695579ecedf648e8c338dc0a2ecb4e40d02e376ae32a2c0
- MD5 9be1d54e3125ad20200ec4a8b791c643
- SHA1 b5677d00b76183c17f4a810fac1b94b1850fac17
- SHA512 f24feafc37500ac7812bf7509d9338dfef02ce26cb8335f90f02022bd1d0ebdd6b1a07bbe7ba56e43b7f3e7df98827dfab6914de31ff6c303c2332546de144e2
- SSDEEP 24576:DxWVeyRYj4O8b8ITDnlCFFB2Bv3X3M3X3NUM:D8Yj4O8b8ITDnlCFFB2BvH3MH37
- TLSH T12455B52173F98116F5F77B749D758AA03A76BC229EB4864E3248371D1F70AA0DD2072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9be1d54e3125ad20200ec4a8b791c643_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9be1d54e3125ad20200ec4a8b791c643_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9be1d54e3125ad20200ec4a8b791c643_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 dba8b4f1514d00c7c695579ecedf648e8c338dc0a2ecb4e40d02e376ae32a2c0
- MD5 9be1d54e3125ad20200ec4a8b791c643
- SHA1 b5677d00b76183c17f4a810fac1b94b1850fac17
- SHA512 f24feafc37500ac7812bf7509d9338dfef02ce26cb8335f90f02022bd1d0ebdd6b1a07bbe7ba56e43b7f3e7df98827dfab6914de31ff6c303c2332546de144e2
- SSDEEP 24576:DxWVeyRYj4O8b8ITDnlCFFB2Bv3X3M3X3NUM:D8Yj4O8b8ITDnlCFFB2BvH3MH37
- TLSH T12455B52173F98116F5F77B749D758AA03A76BC229EB4864E3248371D1F70AA0DD2072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory