General
- Target 2026-08-27_ec9e14fb07b1837b75a6b738b066d603_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 854KB
- Sample260828-dbxzhssvdx
- SHA256 a858bf5757253c990e50348fbe6daafb68512d29385fd481713c2dc47215cda4
- MD5 ec9e14fb07b1837b75a6b738b066d603
- SHA1 a5a2fe5de8d61bf4b900d50e38e8c5725ebbc3de
- SHA512 652c676ad3c009911940ed70600dd70c5fc886501af3138179772da05dd2ed56577c8dd48b1ddcc414d0330938663ead4b82283077463119be76c39ffbc539f9
- SSDEEP 12288:OwKfOVRo9yRYIHK4O8b8ITDnlV0CfYiMJIL0J:OxWVeyRYKK4O8b8ITDnlRqXJ
- TLSH T18E15B62062DC9ABED46BAE3858666962E9337CD15DE843CB2140FF0D7A313B1EC1571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_ec9e14fb07b1837b75a6b738b066d603_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_ec9e14fb07b1837b75a6b738b066d603_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_ec9e14fb07b1837b75a6b738b066d603_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 854KB
- SHA256 a858bf5757253c990e50348fbe6daafb68512d29385fd481713c2dc47215cda4
- MD5 ec9e14fb07b1837b75a6b738b066d603
- SHA1 a5a2fe5de8d61bf4b900d50e38e8c5725ebbc3de
- SHA512 652c676ad3c009911940ed70600dd70c5fc886501af3138179772da05dd2ed56577c8dd48b1ddcc414d0330938663ead4b82283077463119be76c39ffbc539f9
- SSDEEP 12288:OwKfOVRo9yRYIHK4O8b8ITDnlV0CfYiMJIL0J:OxWVeyRYKK4O8b8ITDnlRqXJ
- TLSH T18E15B62062DC9ABED46BAE3858666962E9337CD15DE843CB2140FF0D7A313B1EC1571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory