General
- Target 2026-08-28_6c0ce378c45e5be18d28b257b293de5f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 905KB
- Sample260828-r7bcaadc93
- SHA256 68a33953f2fe95cae268494b7aacb36408ceba73da8b530f356be711ec6198da
- MD5 6c0ce378c45e5be18d28b257b293de5f
- SHA1 da6a05f4459895bcb490da61bad1298ae19cdfdd
- SHA512 6d90989808612571906c38d94bb5148303eaed83ea7588d482f219438a49b5eee937e3df2755fab6268097b77d6655b5200020a6b2d11165a91f0c0b97912e9e
- SSDEEP 12288:IwKfOVRo9yRYaDz4O8b8ITDnljFF0vWV5hEqF:IxWVeyRYYz4O8b8ITDnljFv5F
- TLSH T1D815F921B2E4C026E5B63B344D778EA43A26FC626EB5C24F36547F5D6F316A0DD20326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_6c0ce378c45e5be18d28b257b293de5f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_6c0ce378c45e5be18d28b257b293de5f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_6c0ce378c45e5be18d28b257b293de5f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 905KB
- SHA256 68a33953f2fe95cae268494b7aacb36408ceba73da8b530f356be711ec6198da
- MD5 6c0ce378c45e5be18d28b257b293de5f
- SHA1 da6a05f4459895bcb490da61bad1298ae19cdfdd
- SHA512 6d90989808612571906c38d94bb5148303eaed83ea7588d482f219438a49b5eee937e3df2755fab6268097b77d6655b5200020a6b2d11165a91f0c0b97912e9e
- SSDEEP 12288:IwKfOVRo9yRYaDz4O8b8ITDnljFF0vWV5hEqF:IxWVeyRYYz4O8b8ITDnljFv5F
- TLSH T1D815F921B2E4C026E5B63B344D778EA43A26FC626EB5C24F36547F5D6F316A0DD20326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory