General
- Target 2026-06-29_d91810f2e73979037dd91897b4d53f8b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260630-daplrac16v
- SHA256 90a0a5c81bad0dd1b0fa1da9169570d45d0e22f6e59c591de56d894e3e0a8717
- MD5 d91810f2e73979037dd91897b4d53f8b
- SHA1 56f2ddd8d1e38e76a589e7f28bdae6cc1006d816
- SHA512 add017e24f139951dbfe9cc9c90ffed538f7aa8b76a1926edbbfe8a98e5617c90312efede9e1ed486830dbd94656ab40cd9ae4dcfb7ede3cd0c3d71c83cca87d
- SSDEEP 49152:A8Yx4O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBM:hJR7Xn4TiRCvJm
- TLSH T10185CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_d91810f2e73979037dd91897b4d53f8b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_d91810f2e73979037dd91897b4d53f8b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_d91810f2e73979037dd91897b4d53f8b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 90a0a5c81bad0dd1b0fa1da9169570d45d0e22f6e59c591de56d894e3e0a8717
- MD5 d91810f2e73979037dd91897b4d53f8b
- SHA1 56f2ddd8d1e38e76a589e7f28bdae6cc1006d816
- SHA512 add017e24f139951dbfe9cc9c90ffed538f7aa8b76a1926edbbfe8a98e5617c90312efede9e1ed486830dbd94656ab40cd9ae4dcfb7ede3cd0c3d71c83cca87d
- SSDEEP 49152:A8Yx4O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBM:hJR7Xn4TiRCvJm
- TLSH T10185CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory