General
- Target 2026-08-27_d3a8f822b8dc2ab42320af3e38df5138_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260827-jnt2aa1dnb
- SHA256 2b4c20a38dbae3e92ae04a804f46bf1756f6a78c242e44c018a425ec600afc9e
- MD5 d3a8f822b8dc2ab42320af3e38df5138
- SHA1 a0cda49f4a821e9bb1102e4b407caaa55466698b
- SHA512 11cf9d28228e0555265b8198b9b729a494e40f867af3648b1a38cd2dff921ab6cd05df0316a177e649be6c79bdf25f169591e61bd497b76764a265e09ec7acf8
- SSDEEP 24576:IxWVeyRY0Dw44RE5E/jYKDB8U4jYY0td7kt+X83BOd4O8b8ITDnltFi5d+f56:I8YGw44Rf4O8b8ITDnltFAiA
- TLSH T18565B412BFEC9015F1B33B3099B94AA06A267C617E79C24E3684371EDE717A0DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_d3a8f822b8dc2ab42320af3e38df5138_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_d3a8f822b8dc2ab42320af3e38df5138_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_d3a8f822b8dc2ab42320af3e38df5138_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 2b4c20a38dbae3e92ae04a804f46bf1756f6a78c242e44c018a425ec600afc9e
- MD5 d3a8f822b8dc2ab42320af3e38df5138
- SHA1 a0cda49f4a821e9bb1102e4b407caaa55466698b
- SHA512 11cf9d28228e0555265b8198b9b729a494e40f867af3648b1a38cd2dff921ab6cd05df0316a177e649be6c79bdf25f169591e61bd497b76764a265e09ec7acf8
- SSDEEP 24576:IxWVeyRY0Dw44RE5E/jYKDB8U4jYY0td7kt+X83BOd4O8b8ITDnltFi5d+f56:I8YGw44Rf4O8b8ITDnltFAiA
- TLSH T18565B412BFEC9015F1B33B3099B94AA06A267C617E79C24E3684371EDE717A0DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory