General
- Target 2026-08-24_31450d67e4068b74e6c241081c14179b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260825-thpjqa11ev
- SHA256 e70e800264522785b34c71199b6d752bc5f5193488ae63c604a2104ec6aee4ee
- MD5 31450d67e4068b74e6c241081c14179b
- SHA1 7fc88835e2c637d71ffc75b6b9587be90e2f0ccb
- SHA512 5a84562de5edfa6e38c129b229c14f92195881ae4b2bfbe57c45ef05434f93fa140b8fbf0150377d3a4a9319c1f95847ff57ded5edcf1b444f459bd227d93f60
- SSDEEP 24576:xxWVeyRYFP4O8b8ITDnljFfmXlrkxxhStF:x8YN4O8b8ITDnljFfm4xxG
- TLSH T125A5FAE2BEE0F025E0E12E357D2A99BCAA137C659D72824B3647F32D1B33261DD15316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_31450d67e4068b74e6c241081c14179b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_31450d67e4068b74e6c241081c14179b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_31450d67e4068b74e6c241081c14179b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 e70e800264522785b34c71199b6d752bc5f5193488ae63c604a2104ec6aee4ee
- MD5 31450d67e4068b74e6c241081c14179b
- SHA1 7fc88835e2c637d71ffc75b6b9587be90e2f0ccb
- SHA512 5a84562de5edfa6e38c129b229c14f92195881ae4b2bfbe57c45ef05434f93fa140b8fbf0150377d3a4a9319c1f95847ff57ded5edcf1b444f459bd227d93f60
- SSDEEP 24576:xxWVeyRYFP4O8b8ITDnljFfmXlrkxxhStF:x8YN4O8b8ITDnljFfm4xxG
- TLSH T125A5FAE2BEE0F025E0E12E357D2A99BCAA137C659D72824B3647F32D1B33261DD15316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory