General
- Target 2026-08-25_d55b64713ae7ef8bd8fb245a55ae05f9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260826-h9em2sthlc
- SHA256 74d05363bc81197e9db519f9aefa5611d07035857c5783d2737a809aba640bf2
- MD5 d55b64713ae7ef8bd8fb245a55ae05f9
- SHA1 0f76c798343000d6b73ec296665a65b2e0e2d0f7
- SHA512 a1316188e83e244dcebefc475bc822bd42408fd9c832bf4f5613df2a10e451ff9b0b240710b943876244ecc1b971a643d0c6c062e3d57c4d8a107ce970a34f3d
- SSDEEP 12288:VwKfOVRo9yRYQc4O8b8ITDnljFF0tTnB5DaHJKkEqVbl:VxWVeyRYQc4O8b8ITDnljFoB5Dan
- TLSH T18B65C61563E9801BF4B23B70887A5F941A61BE76AE72C21E7504370EAF717D2D822737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_d55b64713ae7ef8bd8fb245a55ae05f9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_d55b64713ae7ef8bd8fb245a55ae05f9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_d55b64713ae7ef8bd8fb245a55ae05f9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 74d05363bc81197e9db519f9aefa5611d07035857c5783d2737a809aba640bf2
- MD5 d55b64713ae7ef8bd8fb245a55ae05f9
- SHA1 0f76c798343000d6b73ec296665a65b2e0e2d0f7
- SHA512 a1316188e83e244dcebefc475bc822bd42408fd9c832bf4f5613df2a10e451ff9b0b240710b943876244ecc1b971a643d0c6c062e3d57c4d8a107ce970a34f3d
- SSDEEP 12288:VwKfOVRo9yRYQc4O8b8ITDnljFF0tTnB5DaHJKkEqVbl:VxWVeyRYQc4O8b8ITDnljFoB5Dan
- TLSH T18B65C61563E9801BF4B23B70887A5F941A61BE76AE72C21E7504370EAF717D2D822737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory