General
- Target 2026-06-27_1b735d8d87dca05d4b4b354515f7645d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 466KB
- Sample260629-ljmshsb13j
- SHA256 1cf925f00a6bc3242413de6ebf813bcfded314c6aeba9743b2bcca47c01f9f38
- MD5 1b735d8d87dca05d4b4b354515f7645d
- SHA1 e55790a8f7433c4a47722e4b89f18369586fd7fc
- SHA512 43960a407ee63696c3af935758a96b94de004fc8173ecdde0ed6a3f305728d63466792c636342d705428a7fb1c6c68bfcd19d34e207de222571b4421a78ff603
- SSDEEP 6144:JwynAtMrOVRkidy9yIGWlUirCgO704O8b8ITDnlznZaUZzFj5Cz8:JwKfOVRo9yRYLO704O8b8ITDnlF3jIz8
- TLSH T1E3A4163166908F36D56F763085A28EA07667BC255FE087CB62843F19BF712F1DD2620B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_1b735d8d87dca05d4b4b354515f7645d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_1b735d8d87dca05d4b4b354515f7645d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_1b735d8d87dca05d4b4b354515f7645d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 466KB
- SHA256 1cf925f00a6bc3242413de6ebf813bcfded314c6aeba9743b2bcca47c01f9f38
- MD5 1b735d8d87dca05d4b4b354515f7645d
- SHA1 e55790a8f7433c4a47722e4b89f18369586fd7fc
- SHA512 43960a407ee63696c3af935758a96b94de004fc8173ecdde0ed6a3f305728d63466792c636342d705428a7fb1c6c68bfcd19d34e207de222571b4421a78ff603
- SSDEEP 6144:JwynAtMrOVRkidy9yIGWlUirCgO704O8b8ITDnlznZaUZzFj5Cz8:JwKfOVRo9yRYLO704O8b8ITDnlF3jIz8
- TLSH T1E3A4163166908F36D56F763085A28EA07667BC255FE087CB62843F19BF712F1DD2620B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory