General
- Target 2026-08-23_9112ff4ab581105c9c3d2bcc86813557_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260825-3em16axsfs
- SHA256 d8fd70b68a8585c7449233305b989e5d590ee2b26c81805b65e541eff96d4b4a
- MD5 9112ff4ab581105c9c3d2bcc86813557
- SHA1 c6732eab6a023ea0e0dfa2523918e96083977046
- SHA512 6a47cabcecb9f5c894bccd38412dc119aa240ba36cb59e2bd7e0225ac7bd5be74a960a5ee9d8cf15ad3668864d543bcb55e6829abb1bcf24cf984ef81c50a2e1
- SSDEEP 24576:vxWVeyR+89dF1+nLZWMHq4O8b8ITDnlmqUz:v8+5q4O8b8ITDnlmqC
- TLSH T159B55160B2E4C915F2F63B309D758AA41A25BC11ADF8878F2342FB4F7EB1654DD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9112ff4ab581105c9c3d2bcc86813557_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9112ff4ab581105c9c3d2bcc86813557_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9112ff4ab581105c9c3d2bcc86813557_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 d8fd70b68a8585c7449233305b989e5d590ee2b26c81805b65e541eff96d4b4a
- MD5 9112ff4ab581105c9c3d2bcc86813557
- SHA1 c6732eab6a023ea0e0dfa2523918e96083977046
- SHA512 6a47cabcecb9f5c894bccd38412dc119aa240ba36cb59e2bd7e0225ac7bd5be74a960a5ee9d8cf15ad3668864d543bcb55e6829abb1bcf24cf984ef81c50a2e1
- SSDEEP 24576:vxWVeyR+89dF1+nLZWMHq4O8b8ITDnlmqUz:v8+5q4O8b8ITDnlmqC
- TLSH T159B55160B2E4C915F2F63B309D758AA41A25BC11ADF8878F2342FB4F7EB1654DD21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory