General
- Target 2026-08-25_faa51457365238ad6cb31a378f73b130_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260826-a5nfds1cle
- SHA256 6ad2f5f5336cc1a7358e473efcfff2290ac3fece968751161a8055b2c19e5e32
- MD5 faa51457365238ad6cb31a378f73b130
- SHA1 87573b404efdb697d279d845c367f52f8430be8e
- SHA512 2c2043e7e8deaaa552ab8ee664f92a7c39b0944145b536109f2775e02f8a096ce19b33b67360e5be0c881333409054a56199028ec5796669914a33f2e09105d8
- SSDEEP 24576:sxWVeyRYJL7e4O8b8ITDnl2DqVKFALb6uqy8WtM:s8YM4O8b8ITDnl2DqQFA/6uqy89
- TLSH T13D45812162F68928F1F73B305AB09F65A976BC959AB8810F2255371C4F74EB1CE70723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_faa51457365238ad6cb31a378f73b130_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_faa51457365238ad6cb31a378f73b130_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_faa51457365238ad6cb31a378f73b130_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 6ad2f5f5336cc1a7358e473efcfff2290ac3fece968751161a8055b2c19e5e32
- MD5 faa51457365238ad6cb31a378f73b130
- SHA1 87573b404efdb697d279d845c367f52f8430be8e
- SHA512 2c2043e7e8deaaa552ab8ee664f92a7c39b0944145b536109f2775e02f8a096ce19b33b67360e5be0c881333409054a56199028ec5796669914a33f2e09105d8
- SSDEEP 24576:sxWVeyRYJL7e4O8b8ITDnl2DqVKFALb6uqy8WtM:s8YM4O8b8ITDnl2DqQFA/6uqy89
- TLSH T13D45812162F68928F1F73B305AB09F65A976BC959AB8810F2255371C4F74EB1CE70723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory