General
- Target 2026-08-24_68ed9b8e756d1a0dc494b22cc7eb8796_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260825-nd5r9agh57
- SHA256 60b479af9857db4c8887e53aee26bb9f27830f05550ababd797f61e0d2432adb
- MD5 68ed9b8e756d1a0dc494b22cc7eb8796
- SHA1 e78ebbf99fec60b89a021f30e25c47a4c425db7a
- SHA512 58038a2b83e69263a1b7d37a6c05952dc0af1391f25128ded365e67c4748c03ccaf7429cbfa63294adfe5f1891377f9378736edc1d760942bdd2645934336cc8
- SSDEEP 24576:sxWVeyRYhA7s4O8b8ITDnlUSt7riih88ZOORwEw3A3HI3H73H/n73K3H23sN6/:s8Yd4O8b8ITDnl9t7riih88ZOOG
- TLSH T17085612373FC9617F2F7FB70997456711A677C5EAE78C28E12403A4E2970AA0C961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_68ed9b8e756d1a0dc494b22cc7eb8796_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_68ed9b8e756d1a0dc494b22cc7eb8796_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_68ed9b8e756d1a0dc494b22cc7eb8796_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 60b479af9857db4c8887e53aee26bb9f27830f05550ababd797f61e0d2432adb
- MD5 68ed9b8e756d1a0dc494b22cc7eb8796
- SHA1 e78ebbf99fec60b89a021f30e25c47a4c425db7a
- SHA512 58038a2b83e69263a1b7d37a6c05952dc0af1391f25128ded365e67c4748c03ccaf7429cbfa63294adfe5f1891377f9378736edc1d760942bdd2645934336cc8
- SSDEEP 24576:sxWVeyRYhA7s4O8b8ITDnlUSt7riih88ZOORwEw3A3HI3H73H/n73K3H23sN6/:s8Yd4O8b8ITDnl9t7riih88ZOOG
- TLSH T17085612373FC9617F2F7FB70997456711A677C5EAE78C28E12403A4E2970AA0C961723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory