General
- Target 2026-06-25_290231a390529a39491036d941512502_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- Sample260629-3f5mlaax7p
- SHA256 1bc17d2984fd744ee9efa99f36a57a041132d114c1fdf5b2f03372fa4a3d9a48
- MD5 290231a390529a39491036d941512502
- SHA1 86d1569c889323f3893ed5090d293af2c32fd148
- SHA512 86e908e4c20a084181b62687b2a7de34c5c504e99500bbdb16270fefb86527b1db225f054ea85be3c3d5f89941ff0cda2aca5dba383ffaa3c4a4d7f40c3db987
- SSDEEP 49152:S8Y44O8b8ITDnl5Fn3d2xM1MQ6xKF+LWngB7GFM/K2Ht:H6n3d2u65ysWngBSu/Ht
- TLSH T19A06E523DFB58404D0669F35C82365A029333D5987A95A0F1AA4B63F4EF37826E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_290231a390529a39491036d941512502_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_290231a390529a39491036d941512502_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_290231a390529a39491036d941512502_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- SHA256 1bc17d2984fd744ee9efa99f36a57a041132d114c1fdf5b2f03372fa4a3d9a48
- MD5 290231a390529a39491036d941512502
- SHA1 86d1569c889323f3893ed5090d293af2c32fd148
- SHA512 86e908e4c20a084181b62687b2a7de34c5c504e99500bbdb16270fefb86527b1db225f054ea85be3c3d5f89941ff0cda2aca5dba383ffaa3c4a4d7f40c3db987
- SSDEEP 49152:S8Y44O8b8ITDnl5Fn3d2xM1MQ6xKF+LWngB7GFM/K2Ht:H6n3d2u65ysWngBSu/Ht
- TLSH T19A06E523DFB58404D0669F35C82365A029333D5987A95A0F1AA4B63F4EF37826E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory