General
- Target 2026-08-28_90219ec960adfee13ed2a7771b1e190a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 907KB
- Sample260828-peqv6axdkf
- SHA256 065a6db9f4fed11c1b93c6f236c4b447ece9b73e12ddc4303ff9a7f1aef1303b
- MD5 90219ec960adfee13ed2a7771b1e190a
- SHA1 e53e03c70c894b0ca4da4b6829cb7e2cae5908dd
- SHA512 0d44a1ec3e25ed1c9efd3058002daa6749a576a0e48391d77807c604f16feb834e4342d26bda401b3049b746f7b16a4af2d62636a4d434e97a38b75df49dc9bb
- SSDEEP 12288:QwKfOVRo9yRYUv8z4O8b8ITDnljFF07+5WV5hEqdw:QxWVeyRY9z4O8b8ITDnljFw55dw
- TLSH T1A215F921B2E4C026E5B63B344D778EA43A36BC226EB5C24F36547F5D6F316A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_90219ec960adfee13ed2a7771b1e190a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_90219ec960adfee13ed2a7771b1e190a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_90219ec960adfee13ed2a7771b1e190a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 907KB
- SHA256 065a6db9f4fed11c1b93c6f236c4b447ece9b73e12ddc4303ff9a7f1aef1303b
- MD5 90219ec960adfee13ed2a7771b1e190a
- SHA1 e53e03c70c894b0ca4da4b6829cb7e2cae5908dd
- SHA512 0d44a1ec3e25ed1c9efd3058002daa6749a576a0e48391d77807c604f16feb834e4342d26bda401b3049b746f7b16a4af2d62636a4d434e97a38b75df49dc9bb
- SSDEEP 12288:QwKfOVRo9yRYUv8z4O8b8ITDnljFF07+5WV5hEqdw:QxWVeyRY9z4O8b8ITDnljFw55dw
- TLSH T1A215F921B2E4C026E5B63B344D778EA43A36BC226EB5C24F36547F5D6F316A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory