General
- Target 2026-05-28_51d6afb48200172524a2b41c97bf02d3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260528-vtzphahs81
- SHA256 67b74df974e92824856d18820115a74f9d314fc2655978b42cdcc00abbc89c86
- MD5 51d6afb48200172524a2b41c97bf02d3
- SHA1 65ea72ae481cfa4a9af03aaa19d76f16b476fa1f
- SHA512 f2472a5fdac8b4e1861f1625f3c8ea2fcfb13f11d4f2bc2dcf25c4a5ae3e9c563fe5e5f613d9259f48d27cad6924c18de3be61390694c962fee01b0254290d1e
- SSDEEP 12288:QwKfOVRo9yRY+A7/4O8b8ITDnli+nkq3yoIe461V5:QxWVeyRY+A7/4O8b8ITDnli83lT5
- TLSH T1A2454E2163F98628F2F77B719EB49A65AA77BC55AE78C14E1241320D0A34EB0CD71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_51d6afb48200172524a2b41c97bf02d3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_51d6afb48200172524a2b41c97bf02d3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_51d6afb48200172524a2b41c97bf02d3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 67b74df974e92824856d18820115a74f9d314fc2655978b42cdcc00abbc89c86
- MD5 51d6afb48200172524a2b41c97bf02d3
- SHA1 65ea72ae481cfa4a9af03aaa19d76f16b476fa1f
- SHA512 f2472a5fdac8b4e1861f1625f3c8ea2fcfb13f11d4f2bc2dcf25c4a5ae3e9c563fe5e5f613d9259f48d27cad6924c18de3be61390694c962fee01b0254290d1e
- SSDEEP 12288:QwKfOVRo9yRY+A7/4O8b8ITDnli+nkq3yoIe461V5:QxWVeyRY+A7/4O8b8ITDnli83lT5
- TLSH T1A2454E2163F98628F2F77B719EB49A65AA77BC55AE78C14E1241320D0A34EB0CD71733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory