General
- Target 2026-08-25_f9c0264cd546268c65f855c72a859f1b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260826-bcfera1cph
- SHA256 c61ce6d955ea8b2c78c113b56752af9b6e7a62e248d9d01c66a93f800a13bbfb
- MD5 f9c0264cd546268c65f855c72a859f1b
- SHA1 926235e137bf6d7774dae0c1c58a1160a8a418cb
- SHA512 abb0211cac0fbf30b3a33373530850f670db6295c5cbe484c1da90731034b658239be6de24cc068a54e58f135075cce33e072d76f783e30b26faca5896e8ca8d
- SSDEEP 24576:1xWVeyRYUd4O8b8ITDnlfPe0bQBEUOnNFj8VNV:18YM4O8b8ITDnlfPeuQBEUOnNFANV
- TLSH T18065C42176F8C019F5F63B309D769AA02A76BC22DEF5864F32443B1D1F75AA0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_f9c0264cd546268c65f855c72a859f1b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_f9c0264cd546268c65f855c72a859f1b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_f9c0264cd546268c65f855c72a859f1b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 c61ce6d955ea8b2c78c113b56752af9b6e7a62e248d9d01c66a93f800a13bbfb
- MD5 f9c0264cd546268c65f855c72a859f1b
- SHA1 926235e137bf6d7774dae0c1c58a1160a8a418cb
- SHA512 abb0211cac0fbf30b3a33373530850f670db6295c5cbe484c1da90731034b658239be6de24cc068a54e58f135075cce33e072d76f783e30b26faca5896e8ca8d
- SSDEEP 24576:1xWVeyRYUd4O8b8ITDnlfPe0bQBEUOnNFj8VNV:18YM4O8b8ITDnlfPeuQBEUOnNFANV
- TLSH T18065C42176F8C019F5F63B309D769AA02A76BC22DEF5864F32443B1D1F75AA0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory