General
- Target 2026-06-27_b71fc39e2bd3c24ea992c13c004179d1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260629-d557zsdv6m
- SHA256 6f210dba5f641d70a0b6b01c99e298774c5a952dc2687523b12a5613f7c0ae07
- MD5 b71fc39e2bd3c24ea992c13c004179d1
- SHA1 6695da5333a649c6aaef630456ab42c9d37e1457
- SHA512 539b1bcb834281b71ee2e681afc78a1e84200526e19d6ec48d8e5beb2fc3fc68f8e09535dff23e4ef88b94cbc37bd2957689ae57556f5666e32c37e99e376899
- SSDEEP 49152:A8Y54O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBM:hRR7Xn4TiRCvJm
- TLSH T19685CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b71fc39e2bd3c24ea992c13c004179d1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b71fc39e2bd3c24ea992c13c004179d1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b71fc39e2bd3c24ea992c13c004179d1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 6f210dba5f641d70a0b6b01c99e298774c5a952dc2687523b12a5613f7c0ae07
- MD5 b71fc39e2bd3c24ea992c13c004179d1
- SHA1 6695da5333a649c6aaef630456ab42c9d37e1457
- SHA512 539b1bcb834281b71ee2e681afc78a1e84200526e19d6ec48d8e5beb2fc3fc68f8e09535dff23e4ef88b94cbc37bd2957689ae57556f5666e32c37e99e376899
- SSDEEP 49152:A8Y54O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBM:hRR7Xn4TiRCvJm
- TLSH T19685CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory