General
- Target 2026-08-25_93ca8bd26a8a6b10fb82a2b235192a62_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260826-vm19razyet
- SHA256 b5ff8a4f3547f623bfe31360962f2b07a09e15b77a6ea9344e56e76f76371324
- MD5 93ca8bd26a8a6b10fb82a2b235192a62
- SHA1 f2244ca945760323d0efc7d318401e3de8df9367
- SHA512 597ddfdbf08f05ca2898203260e2392f9c3b4409c197dff949f646d97be29a9331af99d34d11ff4b80aea9c3b88fd45c406bfd32e0547f8db92868f90f7a29fd
- SSDEEP 24576:1xWVeyRYTd4O8b8ITDnlfPe0bQBEUOnNFj8VNV:18Yx4O8b8ITDnlfPeuQBEUOnNFANV
- TLSH T1DA65C42176F8C019F5F63B309D769AA02A76BC22DEF5864F32443B1D1F75AA0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_93ca8bd26a8a6b10fb82a2b235192a62_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_93ca8bd26a8a6b10fb82a2b235192a62_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_93ca8bd26a8a6b10fb82a2b235192a62_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 b5ff8a4f3547f623bfe31360962f2b07a09e15b77a6ea9344e56e76f76371324
- MD5 93ca8bd26a8a6b10fb82a2b235192a62
- SHA1 f2244ca945760323d0efc7d318401e3de8df9367
- SHA512 597ddfdbf08f05ca2898203260e2392f9c3b4409c197dff949f646d97be29a9331af99d34d11ff4b80aea9c3b88fd45c406bfd32e0547f8db92868f90f7a29fd
- SSDEEP 24576:1xWVeyRYTd4O8b8ITDnlfPe0bQBEUOnNFj8VNV:18Yx4O8b8ITDnlfPeuQBEUOnNFANV
- TLSH T1DA65C42176F8C019F5F63B309D769AA02A76BC22DEF5864F32443B1D1F75AA0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory