General
- Target 2026-08-25_cd90ac8c31bdb49dc27450f3c7cbcf1c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260826-ktb84awakd
- SHA256 b2dce4ecf4b9cbebc113be51fd058cf4eb96e9a676fef978658ebcc5f9c947b3
- MD5 cd90ac8c31bdb49dc27450f3c7cbcf1c
- SHA1 807e29e5184e1c9e8bbd89ad0123b8099dec6be6
- SHA512 b3d8db6bff239cbe335e99ab90ed483997d5694577360bbc16ecc354d868d60320efb558395c9d34c94548c66b1619a4c9ce5023d728e6118a24e1775e01b68e
- SSDEEP 24576:axWVeyRYKL7F4O8b8ITDnlpDqVKFALb6uNVszWq:a8YI4O8b8ITDnlpDqQFA/6uNuzt
- TLSH T12A35A52263FE9115F2F7777499B04F611E77BCA39AB8854E2248371D4BB09B0CA64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_cd90ac8c31bdb49dc27450f3c7cbcf1c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_cd90ac8c31bdb49dc27450f3c7cbcf1c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_cd90ac8c31bdb49dc27450f3c7cbcf1c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 b2dce4ecf4b9cbebc113be51fd058cf4eb96e9a676fef978658ebcc5f9c947b3
- MD5 cd90ac8c31bdb49dc27450f3c7cbcf1c
- SHA1 807e29e5184e1c9e8bbd89ad0123b8099dec6be6
- SHA512 b3d8db6bff239cbe335e99ab90ed483997d5694577360bbc16ecc354d868d60320efb558395c9d34c94548c66b1619a4c9ce5023d728e6118a24e1775e01b68e
- SSDEEP 24576:axWVeyRYKL7F4O8b8ITDnlpDqVKFALb6uNVszWq:a8YI4O8b8ITDnlpDqQFA/6uNuzt
- TLSH T12A35A52263FE9115F2F7777499B04F611E77BCA39AB8854E2248371D4BB09B0CA64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory