General
- Target 2026-06-29_8444ed20c3c651db23f3d8d971273adc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 874KB
- Sample260630-hya6gshw4x
- SHA256 392977d329a90444b709ce81543472fda3c705e1a54af658980b9c8d95c22f45
- MD5 8444ed20c3c651db23f3d8d971273adc
- SHA1 2a38cc33a9edf5f6f39396c73b4183b65598cdb0
- SHA512 9de53d7516013607cd9fcdf36bfb53b85868977e0c6a28d54b936518b0219864679d8d74a26c96d331a7968540454dad5c39359a4744c98b706b096a07287d7d
- SSDEEP 12288:VwKfOVRo9yRYmM7W4O8b8ITDnlFJgjI00y:VxWVeyRYmM7W4O8b8ITDnlLdy
- TLSH T14B15622163E94B19F5FF7B7099B449A06A677C51AE75C3CE12803F4D3A70AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_8444ed20c3c651db23f3d8d971273adc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_8444ed20c3c651db23f3d8d971273adc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_8444ed20c3c651db23f3d8d971273adc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 874KB
- SHA256 392977d329a90444b709ce81543472fda3c705e1a54af658980b9c8d95c22f45
- MD5 8444ed20c3c651db23f3d8d971273adc
- SHA1 2a38cc33a9edf5f6f39396c73b4183b65598cdb0
- SHA512 9de53d7516013607cd9fcdf36bfb53b85868977e0c6a28d54b936518b0219864679d8d74a26c96d331a7968540454dad5c39359a4744c98b706b096a07287d7d
- SSDEEP 12288:VwKfOVRo9yRYmM7W4O8b8ITDnlFJgjI00y:VxWVeyRYmM7W4O8b8ITDnlLdy
- TLSH T14B15622163E94B19F5FF7B7099B449A06A677C51AE75C3CE12803F4D3A70AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory