General
- Target 2026-08-23_e79834790a67808f4969edb3c30e2983_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260825-z7dfmswsfy
- SHA256 2f48551b0faecb117b34e71ec860dfe290fe1db59eb5a58d46eb772dc0e9eda6
- MD5 e79834790a67808f4969edb3c30e2983
- SHA1 3bcc1f9bc38ba3191d1c2a06189d569c4f5c5a87
- SHA512 c27e0890f33668af8ee0b98a17358b73a317873ab686d74707425ce56e9dfb22d8b0553ec492387dcf8285542300448056792bfa3a4c879604bde75f2169ac96
- SSDEEP 24576:nxWVeyRY2I4O8b8ITDnlCF7B2Bv3X3M3X3NUe:n8Yd4O8b8ITDnlCF7B2BvH3MH35
- TLSH T15B55B52173F98116F5F77B749D758AA03A76BC229EB4864E3248371D1F70AA0DD2072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_e79834790a67808f4969edb3c30e2983_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_e79834790a67808f4969edb3c30e2983_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_e79834790a67808f4969edb3c30e2983_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 2f48551b0faecb117b34e71ec860dfe290fe1db59eb5a58d46eb772dc0e9eda6
- MD5 e79834790a67808f4969edb3c30e2983
- SHA1 3bcc1f9bc38ba3191d1c2a06189d569c4f5c5a87
- SHA512 c27e0890f33668af8ee0b98a17358b73a317873ab686d74707425ce56e9dfb22d8b0553ec492387dcf8285542300448056792bfa3a4c879604bde75f2169ac96
- SSDEEP 24576:nxWVeyRY2I4O8b8ITDnlCF7B2Bv3X3M3X3NUe:n8Yd4O8b8ITDnlCF7B2BvH3MH35
- TLSH T15B55B52173F98116F5F77B749D758AA03A76BC229EB4864E3248371D1F70AA0DD2072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory