General
- Target 2026-06-29_8bb5450df0b95a7eaefa72482abf415e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 609KB
- Sample260630-hhqagahs61
- SHA256 faba3f0ace833b8f9c03cf5ef0f9da7ac69ae9253d6fb4e782da18ad58a6de62
- MD5 8bb5450df0b95a7eaefa72482abf415e
- SHA1 28d2da20005997cb11e849bad59508444542c815
- SHA512 38f1a49e365c82e5d6049cede6879f5589a6a05bdcf033d8be06e5de5bc89e63c4c5b188f27ce62d2b6a65697b4de5a6d41a29010b44b4f1be8501312d8d2643
- SSDEEP 12288:+wKfOVRo9yRYMO7B4O8b8ITDnlLKjIdhcNv:+xWVeyRYMO7B4O8b8ITDnlLhiNv
- TLSH T135D4823066E58F25F5BF7A3049714E606A27BC516EB087EE12603F1D7A31AA0DC6172F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_8bb5450df0b95a7eaefa72482abf415e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_8bb5450df0b95a7eaefa72482abf415e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_8bb5450df0b95a7eaefa72482abf415e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 609KB
- SHA256 faba3f0ace833b8f9c03cf5ef0f9da7ac69ae9253d6fb4e782da18ad58a6de62
- MD5 8bb5450df0b95a7eaefa72482abf415e
- SHA1 28d2da20005997cb11e849bad59508444542c815
- SHA512 38f1a49e365c82e5d6049cede6879f5589a6a05bdcf033d8be06e5de5bc89e63c4c5b188f27ce62d2b6a65697b4de5a6d41a29010b44b4f1be8501312d8d2643
- SSDEEP 12288:+wKfOVRo9yRYMO7B4O8b8ITDnlLKjIdhcNv:+xWVeyRYMO7B4O8b8ITDnlLhiNv
- TLSH T135D4823066E58F25F5BF7A3049714E606A27BC516EB087EE12603F1D7A31AA0DC6172F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory