General
- Target 2026-08-25_ef4595f507553baa1c8997ea4741bac8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 934KB
- Sample260826-dndreabe67
- SHA256 e2fb77c1f7bbc25e67380aeb9cdb00cec46ce3c615fa455e8c0ce5e537fc4d40
- MD5 ef4595f507553baa1c8997ea4741bac8
- SHA1 fa6286efe76f3c4598f29437bafb591a62b826ce
- SHA512 f0c48127cdc60db09a946dc3dbc5fd4be63ac8b9ff0f9a197ab442503df399b89ccd57351a90e56c930b92237395a3bc5cbfcb2a01caf1fe82c3c521fe7d872e
- SSDEEP 24576:XxWVeyRYs7dF1+nLZWMHk4O8b8ITDnlv3C+:X8Y/k4O8b8ITDnlvT
- TLSH T15D15B62177E98115F5F37F309EB94AA06A77BC51AEB5C64F2640334E0E71AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_ef4595f507553baa1c8997ea4741bac8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_ef4595f507553baa1c8997ea4741bac8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_ef4595f507553baa1c8997ea4741bac8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 934KB
- SHA256 e2fb77c1f7bbc25e67380aeb9cdb00cec46ce3c615fa455e8c0ce5e537fc4d40
- MD5 ef4595f507553baa1c8997ea4741bac8
- SHA1 fa6286efe76f3c4598f29437bafb591a62b826ce
- SHA512 f0c48127cdc60db09a946dc3dbc5fd4be63ac8b9ff0f9a197ab442503df399b89ccd57351a90e56c930b92237395a3bc5cbfcb2a01caf1fe82c3c521fe7d872e
- SSDEEP 24576:XxWVeyRYs7dF1+nLZWMHk4O8b8ITDnlv3C+:X8Y/k4O8b8ITDnlvT
- TLSH T15D15B62177E98115F5F37F309EB94AA06A77BC51AEB5C64F2640334E0E71AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory