General
- Target 2026-08-25_c40bd4f606f5fcabd6a704338d8c91b7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260826-mmp8gstyas
- SHA256 3e527a9ef3b21629696bed444d8046cd02900263c7f3c90a989c5180bbab4e43
- MD5 c40bd4f606f5fcabd6a704338d8c91b7
- SHA1 f69c12fdafa03e66c26e439c36ef20dc92447241
- SHA512 5ee3224242026e89c2a46ea94fcc7e8e00dee40edba4290b2304666b5173b83464bdab469e1ab175eea645b7ef9d886c3cd530ab3ee58938372f6e33555d927a
- SSDEEP 24576:1xWVeyRYyd4O8b8ITDnlfPe0bQBEUOnNFj8VNV:18Y+4O8b8ITDnlfPeuQBEUOnNFANV
- TLSH T15365C42176F8C019F5F63B309D769AA02A76BC22DEF5864F32443B1D1F75AA0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_c40bd4f606f5fcabd6a704338d8c91b7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_c40bd4f606f5fcabd6a704338d8c91b7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_c40bd4f606f5fcabd6a704338d8c91b7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 3e527a9ef3b21629696bed444d8046cd02900263c7f3c90a989c5180bbab4e43
- MD5 c40bd4f606f5fcabd6a704338d8c91b7
- SHA1 f69c12fdafa03e66c26e439c36ef20dc92447241
- SHA512 5ee3224242026e89c2a46ea94fcc7e8e00dee40edba4290b2304666b5173b83464bdab469e1ab175eea645b7ef9d886c3cd530ab3ee58938372f6e33555d927a
- SSDEEP 24576:1xWVeyRYyd4O8b8ITDnlfPe0bQBEUOnNFj8VNV:18Y+4O8b8ITDnlfPeuQBEUOnNFANV
- TLSH T15365C42176F8C019F5F63B309D769AA02A76BC22DEF5864F32443B1D1F75AA0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory