General
- Target 2026-08-25_f16bcabc22a90aba7d43eb63e575c86e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 938KB
- Sample260826-c81w1a1gre
- SHA256 d880436e7fffab18d9f1afe369e2dfa287d5fd6310624445616b9367e1c936ca
- MD5 f16bcabc22a90aba7d43eb63e575c86e
- SHA1 8af69dc452385ffeeb291c832416faa425371b7f
- SHA512 8aeedbec3da80a31794a2fbdc8b92223abbc56542ec8486c9145512d102e832706e4b55663df98ab12449dca8cc2156804c595036658356bd222c6820a31d2cd
- SSDEEP 12288:WwKfOVRo9yRYjyz4O8b8ITDnlNFF0E+X+IYREqto:WxWVeyRYjyz4O8b8ITDnlNFH4Uo
- TLSH T14715E921B3E4C025F4B67B344D768EA47A76BC226EB5C24F3684371D6F316A0DD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_f16bcabc22a90aba7d43eb63e575c86e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_f16bcabc22a90aba7d43eb63e575c86e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_f16bcabc22a90aba7d43eb63e575c86e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 938KB
- SHA256 d880436e7fffab18d9f1afe369e2dfa287d5fd6310624445616b9367e1c936ca
- MD5 f16bcabc22a90aba7d43eb63e575c86e
- SHA1 8af69dc452385ffeeb291c832416faa425371b7f
- SHA512 8aeedbec3da80a31794a2fbdc8b92223abbc56542ec8486c9145512d102e832706e4b55663df98ab12449dca8cc2156804c595036658356bd222c6820a31d2cd
- SSDEEP 12288:WwKfOVRo9yRYjyz4O8b8ITDnlNFF0E+X+IYREqto:WxWVeyRYjyz4O8b8ITDnlNFH4Uo
- TLSH T14715E921B3E4C025F4B67B344D768EA47A76BC226EB5C24F3684371D6F316A0DD2172A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory