General
- Target 2026-08-27_87efc1f4da02986dae4072fb95c1460f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260827-qps9pshf85
- SHA256 f6505660d5b699e5ab882379bab5636afa00f064e8978b25d7e4c530113eef8d
- MD5 87efc1f4da02986dae4072fb95c1460f
- SHA1 5f92f8e1e164f1958ca2d12769204f5746ebcced
- SHA512 df06248a76233ad93d45a259ebbf7f5b749b1a12b0682fe5999ff7de421cb79bb982e69bcbaad5b846782b9a4fdf561ea897515af09741a4d7115438efb51dc9
- SSDEEP 12288:owKfOVRo9yRY+I4O8b8ITDnlnFF0VNG7qCY:oxWVeyRY+I4O8b8ITDnlnFCEY
- TLSH T1E755C622B3E98115F5F37B309EB64AE02B267C616E79C24F3684370E5E746A0DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_87efc1f4da02986dae4072fb95c1460f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_87efc1f4da02986dae4072fb95c1460f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_87efc1f4da02986dae4072fb95c1460f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 f6505660d5b699e5ab882379bab5636afa00f064e8978b25d7e4c530113eef8d
- MD5 87efc1f4da02986dae4072fb95c1460f
- SHA1 5f92f8e1e164f1958ca2d12769204f5746ebcced
- SHA512 df06248a76233ad93d45a259ebbf7f5b749b1a12b0682fe5999ff7de421cb79bb982e69bcbaad5b846782b9a4fdf561ea897515af09741a4d7115438efb51dc9
- SSDEEP 12288:owKfOVRo9yRY+I4O8b8ITDnlnFF0VNG7qCY:oxWVeyRY+I4O8b8ITDnlnFCEY
- TLSH T1E755C622B3E98115F5F37B309EB64AE02B267C616E79C24F3684370E5E746A0DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory