General
- Target 2026-08-25_c0f93d9a3d0f835235e96fa4ebb67166_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260826-m436nsxdkd
- SHA256 d60441f0576513c8dc58816c539f3e3e7242f25e4284cf3873cb1fc068dc6978
- MD5 c0f93d9a3d0f835235e96fa4ebb67166
- SHA1 754696f80f05151f0f56e9d55839dc85c31042a7
- SHA512 9f10f97c6056341ccbbcfa27308a84c533509c6ae3cd2683a2d86038ef9bcc0d3c09a5cabbe5a0dddb8101056d487821944889cc31dc5e6f201da9d7cee279d0
- SSDEEP 49152:68YxcCyEq9DRho/ctH01Ws74rA4RUBDHgE3dqFWV+4O8b8ITDnl/M65:/05qFb0I+0PqkWdX
- TLSH T161B5AE316590CE26E3EF763088614E6435176C154EE84BCB6382FF8B7BB22B5DD66207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c0f93d9a3d0f835235e96fa4ebb67166_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c0f93d9a3d0f835235e96fa4ebb67166_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c0f93d9a3d0f835235e96fa4ebb67166_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 d60441f0576513c8dc58816c539f3e3e7242f25e4284cf3873cb1fc068dc6978
- MD5 c0f93d9a3d0f835235e96fa4ebb67166
- SHA1 754696f80f05151f0f56e9d55839dc85c31042a7
- SHA512 9f10f97c6056341ccbbcfa27308a84c533509c6ae3cd2683a2d86038ef9bcc0d3c09a5cabbe5a0dddb8101056d487821944889cc31dc5e6f201da9d7cee279d0
- SSDEEP 49152:68YxcCyEq9DRho/ctH01Ws74rA4RUBDHgE3dqFWV+4O8b8ITDnl/M65:/05qFb0I+0PqkWdX
- TLSH T161B5AE316590CE26E3EF763088614E6435176C154EE84BCB6382FF8B7BB22B5DD66207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory