General
- Target 2026-08-25_e52d28afa7c87b6ec7a05fc30f1e06e6_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.3MB
- Sample260826-fgvsfsyyev
- SHA256 ee56869e00a52b082d42311111551e191dfcfe7ee504ae11c7c28c2f10ffe116
- MD5 e52d28afa7c87b6ec7a05fc30f1e06e6
- SHA1 cc4df3ec0d957027a7bcfd3d9adb1afe1c9195be
- SHA512 3669efe6d96b622aae662bf56fe19ebefaf7958494716fcc4def3582f01d96b4207e152218f757fb3655cdc9572ee7efb86025aed24e98b4a5cdb3c3d3251216
- SSDEEP 49152:a8YW4O8b8ITDnlGFKjN5SR7Xgo4TiRPnLWvJBT:fTK+R7Xn4TiRCvJF
- TLSH T1A6F518E12EE9B506F2F72B30797546BD1A677C11AEF4924E1247FB0E6C70660B921323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_e52d28afa7c87b6ec7a05fc30f1e06e6_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_e52d28afa7c87b6ec7a05fc30f1e06e6_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e52d28afa7c87b6ec7a05fc30f1e06e6_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.3MB
- SHA256 ee56869e00a52b082d42311111551e191dfcfe7ee504ae11c7c28c2f10ffe116
- MD5 e52d28afa7c87b6ec7a05fc30f1e06e6
- SHA1 cc4df3ec0d957027a7bcfd3d9adb1afe1c9195be
- SHA512 3669efe6d96b622aae662bf56fe19ebefaf7958494716fcc4def3582f01d96b4207e152218f757fb3655cdc9572ee7efb86025aed24e98b4a5cdb3c3d3251216
- SSDEEP 49152:a8YW4O8b8ITDnlGFKjN5SR7Xgo4TiRPnLWvJBT:fTK+R7Xn4TiRCvJF
- TLSH T1A6F518E12EE9B506F2F72B30797546BD1A677C11AEF4924E1247FB0E6C70660B921323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory