General
- Target 2026-08-24_b90dd114637952e12b2468c47c0ae4f9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260825-dfznxassfx
- SHA256 8729a1c186c635f3c9574f843de45bafa6837c7a6a24b26201c44cc3115da8f1
- MD5 b90dd114637952e12b2468c47c0ae4f9
- SHA1 493bc314a5f6e6629cba0d4f22e73577f7202f2d
- SHA512 4d67df0860c66d93fd87e9181846725582a63cf361eac2a51c0adc1f380b3b19a0f16cc6b1a99a78506be6adaff25b1282f7f7330cb6387a84df645e429a3c05
- SSDEEP 12288:PwKfOVRo9yRYynBz4O8b8ITDnlL0QiVro5A8Gc:PxWVeyRYyBz4O8b8ITDnlqIKc
- TLSH T144459322A3FDD124F2F32B7499754BA51A67BD62AEB8C64F2244371D1E706B0CD24723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_b90dd114637952e12b2468c47c0ae4f9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_b90dd114637952e12b2468c47c0ae4f9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_b90dd114637952e12b2468c47c0ae4f9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 8729a1c186c635f3c9574f843de45bafa6837c7a6a24b26201c44cc3115da8f1
- MD5 b90dd114637952e12b2468c47c0ae4f9
- SHA1 493bc314a5f6e6629cba0d4f22e73577f7202f2d
- SHA512 4d67df0860c66d93fd87e9181846725582a63cf361eac2a51c0adc1f380b3b19a0f16cc6b1a99a78506be6adaff25b1282f7f7330cb6387a84df645e429a3c05
- SSDEEP 12288:PwKfOVRo9yRYynBz4O8b8ITDnlL0QiVro5A8Gc:PxWVeyRYyBz4O8b8ITDnlqIKc
- TLSH T144459322A3FDD124F2F32B7499754BA51A67BD62AEB8C64F2244371D1E706B0CD24723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory