General
- Target 2026-06-27_37b6e46d8dd22525dfa5fca8ceb6d0f8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260629-kc7zfaay8j
- SHA256 7f184a335de372ceafc8e60d3f3b0a42a4b5734c22d580196650b1485e25683b
- MD5 37b6e46d8dd22525dfa5fca8ceb6d0f8
- SHA1 fbb51ff66d5b26d9dfea34682605c8eaa842988c
- SHA512 4b0044f5ab0e16a0c8c52dd4799dfe73a14ee328255bbd9222c493c151cc821f5842a7b887b6f7ef0d159bcd08112c646a5303bf408589f4674612d1297d030d
- SSDEEP 12288:CwKfOVRo9yRY9T4O8b8ITDnlhN+bX1GEAZ:CxWVeyRY9T4O8b8ITDnlhNM5AZ
- TLSH T1BD3581316590CE26E2DF363088628E6435176C155ED84BCB6383FF9B7BB22B5DD26207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_37b6e46d8dd22525dfa5fca8ceb6d0f8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_37b6e46d8dd22525dfa5fca8ceb6d0f8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_37b6e46d8dd22525dfa5fca8ceb6d0f8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 7f184a335de372ceafc8e60d3f3b0a42a4b5734c22d580196650b1485e25683b
- MD5 37b6e46d8dd22525dfa5fca8ceb6d0f8
- SHA1 fbb51ff66d5b26d9dfea34682605c8eaa842988c
- SHA512 4b0044f5ab0e16a0c8c52dd4799dfe73a14ee328255bbd9222c493c151cc821f5842a7b887b6f7ef0d159bcd08112c646a5303bf408589f4674612d1297d030d
- SSDEEP 12288:CwKfOVRo9yRY9T4O8b8ITDnlhN+bX1GEAZ:CxWVeyRY9T4O8b8ITDnlhNM5AZ
- TLSH T1BD3581316590CE26E2DF363088628E6435176C155ED84BCB6383FF9B7BB22B5DD26207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory