General
- Target 2026-06-08_c2d566fc04f9918f58fbf97f139fc63a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1005KB
- Sample260608-tkl7dagv7p
- SHA256 932242a37578c58cecd1d6b573f5bc7110f69b934eb7a7a872db8f1e59f8e852
- MD5 c2d566fc04f9918f58fbf97f139fc63a
- SHA1 9662d7c49114b1765d1db249c50f62c07744db9e
- SHA512 e5970c24aada8b423acd11b1af509c0693542dac5024850998176eabab7eab7abacd5ce51a13111a72f51d9a647962843c1acc8d2e5b40274eb97562f1102438
- SSDEEP 12288:TwKfOVRo9yRYkQK4O8b8ITDnlz00BrhEEi1I:TxWVeyRYk94O8b8ITDnldx8I
- TLSH T111252F2162E89B15F5BF3F3099B549A0EA377C51AE7587CE26403F4E3A71B90C921723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-08_c2d566fc04f9918f58fbf97f139fc63a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-08_c2d566fc04f9918f58fbf97f139fc63a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-08_c2d566fc04f9918f58fbf97f139fc63a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1005KB
- SHA256 932242a37578c58cecd1d6b573f5bc7110f69b934eb7a7a872db8f1e59f8e852
- MD5 c2d566fc04f9918f58fbf97f139fc63a
- SHA1 9662d7c49114b1765d1db249c50f62c07744db9e
- SHA512 e5970c24aada8b423acd11b1af509c0693542dac5024850998176eabab7eab7abacd5ce51a13111a72f51d9a647962843c1acc8d2e5b40274eb97562f1102438
- SSDEEP 12288:TwKfOVRo9yRYkQK4O8b8ITDnlz00BrhEEi1I:TxWVeyRYk94O8b8ITDnldx8I
- TLSH T111252F2162E89B15F5BF3F3099B549A0EA377C51AE7587CE26403F4E3A71B90C921723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory