General
- Target 2026-08-23_96a79429bf340dea823985e51afa5f1f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260825-28tkcsfk5y
- SHA256 733c8f9921232dde624d7a599523d8174890d85b53d61d04b65b87c8d234fdd5
- MD5 96a79429bf340dea823985e51afa5f1f
- SHA1 727ea70afd8e6ce43b2f37fe24e0a193382a24c9
- SHA512 7c8d14fc7e0477650c0f445da2b86e40aa08709b5d916afd4b54ab988f8ba2a082fd26578b57b3233d466b5683041bf82972092305b6d517df7db00df67e9fb7
- SSDEEP 24576:yxWVeyRY0L7F4O8b8ITDnlpDqVKFALb6uNVszWL:y8Y64O8b8ITDnlpDqQFA/6uNuzc
- TLSH T16335A52263FE9115F2F7777499B04F611E77BCA39AB8854E2248371D4BB09B0CA64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_96a79429bf340dea823985e51afa5f1f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_96a79429bf340dea823985e51afa5f1f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_96a79429bf340dea823985e51afa5f1f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 733c8f9921232dde624d7a599523d8174890d85b53d61d04b65b87c8d234fdd5
- MD5 96a79429bf340dea823985e51afa5f1f
- SHA1 727ea70afd8e6ce43b2f37fe24e0a193382a24c9
- SHA512 7c8d14fc7e0477650c0f445da2b86e40aa08709b5d916afd4b54ab988f8ba2a082fd26578b57b3233d466b5683041bf82972092305b6d517df7db00df67e9fb7
- SSDEEP 24576:yxWVeyRY0L7F4O8b8ITDnlpDqVKFALb6uNVszWL:y8Y64O8b8ITDnlpDqQFA/6uNuzc
- TLSH T16335A52263FE9115F2F7777499B04F611E77BCA39AB8854E2248371D4BB09B0CA64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory