General
- Target 2026-06-27_efbf0cee62c9dcd08091d6906160b114_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260629-bxd3esbv9k
- SHA256 1832c43a24f5a5db438a8be7f3955445bc890e550bd34af8ff3d2aa62d5d96b8
- MD5 efbf0cee62c9dcd08091d6906160b114
- SHA1 b3657aefa672bfbb90e9c7cb4815fb146b4210aa
- SHA512 9ff02917e07c1b03419f657278c290f6b233dc886d743e3ac94aadc56c65dcf04e79a373b9a3a05519fc17500ddabd654a7763644b183260ce0332391ff825a0
- SSDEEP 49152:A8Yr4O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBM:hzR7Xn4TiRCvJ2
- TLSH T12D85CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_efbf0cee62c9dcd08091d6906160b114_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_efbf0cee62c9dcd08091d6906160b114_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_efbf0cee62c9dcd08091d6906160b114_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 1832c43a24f5a5db438a8be7f3955445bc890e550bd34af8ff3d2aa62d5d96b8
- MD5 efbf0cee62c9dcd08091d6906160b114
- SHA1 b3657aefa672bfbb90e9c7cb4815fb146b4210aa
- SHA512 9ff02917e07c1b03419f657278c290f6b233dc886d743e3ac94aadc56c65dcf04e79a373b9a3a05519fc17500ddabd654a7763644b183260ce0332391ff825a0
- SSDEEP 49152:A8Yr4O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBM:hzR7Xn4TiRCvJ2
- TLSH T12D85CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory