General
- Target 2026-08-25_a5f33b14e7632823007b41eb4c48a3fb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260826-ryphjsxzgz
- SHA256 6ef73ff09ca8d7d91faa0731758f8f1f7dec10afa3e702383e6c44b46365a5c6
- MD5 a5f33b14e7632823007b41eb4c48a3fb
- SHA1 b3e3478c01efbbc1c8019e953ca91715e4d810c3
- SHA512 89d1919f41bc307135f031843ba835adb308ceab0241ff48d6efe3b09356a9421b9c3b6d21f3fbdfc0f62e1683e4e8db3df47bffd4759bd491c4f6ad20df0a98
- SSDEEP 12288:3wKfOVRo9yRYv86Vm4O8b8ITDnljFF0/TfAQ:3xWVeyRYv8Z4O8b8ITDnljFG
- TLSH T11B557261B3E98515F1F63F305DB68AA02A36BC52AE79C34F22443B1E6E71790DD21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_a5f33b14e7632823007b41eb4c48a3fb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_a5f33b14e7632823007b41eb4c48a3fb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_a5f33b14e7632823007b41eb4c48a3fb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 6ef73ff09ca8d7d91faa0731758f8f1f7dec10afa3e702383e6c44b46365a5c6
- MD5 a5f33b14e7632823007b41eb4c48a3fb
- SHA1 b3e3478c01efbbc1c8019e953ca91715e4d810c3
- SHA512 89d1919f41bc307135f031843ba835adb308ceab0241ff48d6efe3b09356a9421b9c3b6d21f3fbdfc0f62e1683e4e8db3df47bffd4759bd491c4f6ad20df0a98
- SSDEEP 12288:3wKfOVRo9yRYv86Vm4O8b8ITDnljFF0/TfAQ:3xWVeyRYv8Z4O8b8ITDnljFG
- TLSH T11B557261B3E98515F1F63F305DB68AA02A36BC52AE79C34F22443B1E6E71790DD21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory