General
- Target 2026-06-04_3411463b8ff223b10f20d1eac9aaf713_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260604-xfcc6acv2w
- SHA256 3ec87d413878930b3ff3d0a57a8a4e0364fb443851123deb2df40667d541560a
- MD5 3411463b8ff223b10f20d1eac9aaf713
- SHA1 803f229fcdc8a724974bfdbe8478752375432599
- SHA512 c40c0d30ba7c6ded35910dad613c2be12166466dacca471ae6e83e350748356fee804d5e1ea4a57d3d2c73948c9fca3890e0ae1438e434cf4089f865c94afeae
- SSDEEP 12288:jwKfOVRo9yRYaA7E4O8b8ITDnlVkq3yoIDJcvbpL:jxWVeyRYaA7E4O8b8ITDnlJ3fL
- TLSH T11C35952163FD4718F1FB7B70A9B45A612A77BC62DE75C78D22443B0D2A70AA0C961733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_3411463b8ff223b10f20d1eac9aaf713_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_3411463b8ff223b10f20d1eac9aaf713_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_3411463b8ff223b10f20d1eac9aaf713_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 3ec87d413878930b3ff3d0a57a8a4e0364fb443851123deb2df40667d541560a
- MD5 3411463b8ff223b10f20d1eac9aaf713
- SHA1 803f229fcdc8a724974bfdbe8478752375432599
- SHA512 c40c0d30ba7c6ded35910dad613c2be12166466dacca471ae6e83e350748356fee804d5e1ea4a57d3d2c73948c9fca3890e0ae1438e434cf4089f865c94afeae
- SSDEEP 12288:jwKfOVRo9yRYaA7E4O8b8ITDnlVkq3yoIDJcvbpL:jxWVeyRYaA7E4O8b8ITDnlJ3fL
- TLSH T11C35952163FD4718F1FB7B70A9B45A612A77BC62DE75C78D22443B0D2A70AA0C961733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory