General
- Target 2026-08-24_9858de81d29b1dcc2cfbebdb38038b7c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.7MB
- Sample260825-hpjfhagb83
- SHA256 6cdab679c6d3d3b388f695e2f929aff07ced6d81c09c341bd270d050b714cdcd
- MD5 9858de81d29b1dcc2cfbebdb38038b7c
- SHA1 e4d1522f316daab5e5c4dbb86adba70a4c9acaca
- SHA512 7e157fe78867fe21815c402cd195c230f0c5d8fdd97cc5b6c110ce0fcab9160a252ddd88e08a80d08bd99fcab8216799785e6116b5f386501daa1e003d0944c2
- SSDEEP 49152:P8Y+4O8b8ITDnl5FC5F7s2xM1MQ6xKF+LWngB7GFM/K2HE:0IC5F7s2u65ysWngBSu/HE
- TLSH T16B3682E3EFB1B114E0919E31F922657C99233D698B29894B2543F33E4AF2352591733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_9858de81d29b1dcc2cfbebdb38038b7c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_9858de81d29b1dcc2cfbebdb38038b7c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_9858de81d29b1dcc2cfbebdb38038b7c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.7MB
- SHA256 6cdab679c6d3d3b388f695e2f929aff07ced6d81c09c341bd270d050b714cdcd
- MD5 9858de81d29b1dcc2cfbebdb38038b7c
- SHA1 e4d1522f316daab5e5c4dbb86adba70a4c9acaca
- SHA512 7e157fe78867fe21815c402cd195c230f0c5d8fdd97cc5b6c110ce0fcab9160a252ddd88e08a80d08bd99fcab8216799785e6116b5f386501daa1e003d0944c2
- SSDEEP 49152:P8Y+4O8b8ITDnl5FC5F7s2xM1MQ6xKF+LWngB7GFM/K2HE:0IC5F7s2u65ysWngBSu/HE
- TLSH T16B3682E3EFB1B114E0919E31F922657C99233D698B29894B2543F33E4AF2352591733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory