General
- Target 2026-09-03_d7721f7699a90f524b2090c232ce3058_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 934KB
- Sample260903-1csgrasybs
- SHA256 e0a274be56caf9382acfb3cd4215aa783e18ae4e69b3c5ef47156a7d229f51c0
- MD5 d7721f7699a90f524b2090c232ce3058
- SHA1 6c1b96f73088097ec0ff85d04dd36042ea29e0b7
- SHA512 e136bcf4c89c8aeba74693aca1411d16cc1c3c29cf8e3304629601ed06e50fc6b61eba389f3efa35bc32e8a558e09dacff71e5d44cb942d9f1a3a677effd87c6
- SSDEEP 24576:nxWVeyRY+7dF1+nLZWMHk4O8b8ITDnlv3C1:n8YJk4O8b8ITDnlvM
- TLSH T1EF15B62177E98115F5F37F309EB94AA06A77BC51AEB5C64F2640334E0E71AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_d7721f7699a90f524b2090c232ce3058_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_d7721f7699a90f524b2090c232ce3058_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_d7721f7699a90f524b2090c232ce3058_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 934KB
- SHA256 e0a274be56caf9382acfb3cd4215aa783e18ae4e69b3c5ef47156a7d229f51c0
- MD5 d7721f7699a90f524b2090c232ce3058
- SHA1 6c1b96f73088097ec0ff85d04dd36042ea29e0b7
- SHA512 e136bcf4c89c8aeba74693aca1411d16cc1c3c29cf8e3304629601ed06e50fc6b61eba389f3efa35bc32e8a558e09dacff71e5d44cb942d9f1a3a677effd87c6
- SSDEEP 24576:nxWVeyRY+7dF1+nLZWMHk4O8b8ITDnlv3C1:n8YJk4O8b8ITDnlvM
- TLSH T1EF15B62177E98115F5F37F309EB94AA06A77BC51AEB5C64F2640334E0E71AA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory