General
- Target 2026-06-27_c596ef92bc2143963e8b9ce28993b914_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 589KB
- Sample260629-dl4vtaby8v
- SHA256 4f40f88ddbe090a56ea550271aa5670b8f03b66ad43e9d7c2339de203cae2b8d
- MD5 c596ef92bc2143963e8b9ce28993b914
- SHA1 ac4b2450a264ac0fe90cefae1777f9e6b970a3f3
- SHA512 f492a352eb53d2db84da310005bc5c85692783f36f12ba2d2ad07dfde925b30508bdbb3de454229bb8c342926d6f4121700df78a5a943de2427d76a780c333c3
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUi5O7B4O8b8ITDnlznZQAg8iw+:TwKfOVRo9yRYzO7B4O8b8ITDnl3g8iw+
- TLSH T190D42A316A908A36D56B3A3045619E6C36176C25CEA34FCB62803FDDFBF16A1CD25237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_c596ef92bc2143963e8b9ce28993b914_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_c596ef92bc2143963e8b9ce28993b914_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_c596ef92bc2143963e8b9ce28993b914_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 589KB
- SHA256 4f40f88ddbe090a56ea550271aa5670b8f03b66ad43e9d7c2339de203cae2b8d
- MD5 c596ef92bc2143963e8b9ce28993b914
- SHA1 ac4b2450a264ac0fe90cefae1777f9e6b970a3f3
- SHA512 f492a352eb53d2db84da310005bc5c85692783f36f12ba2d2ad07dfde925b30508bdbb3de454229bb8c342926d6f4121700df78a5a943de2427d76a780c333c3
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUi5O7B4O8b8ITDnlznZQAg8iw+:TwKfOVRo9yRYzO7B4O8b8ITDnl3g8iw+
- TLSH T190D42A316A908A36D56B3A3045619E6C36176C25CEA34FCB62803FDDFBF16A1CD25237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory