General
- Target 2026-06-29_539949013d950036620f9d47bffb66ac_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260630-ll6cmscs6q
- SHA256 3381ead9909c555850ff78f31e0715e03e6adca123fb9d418e7e382039b9ba49
- MD5 539949013d950036620f9d47bffb66ac
- SHA1 8c453c457c3a9ad8834c0393bb2d4ef6386b227c
- SHA512 5e1f868b81d7d446507acb45f77d3f45ebeef738af4cf979b72f60bb4b6fe5b140782eb22e501a1c83fd341bf8b4fb1fcf9c0248c778057a94c1724e49007859
- SSDEEP 12288:pwKfOVRo9yRYBm/4O8b8ITDnljFF0MaHJKkEqRbj+:pxWVeyRYBm/4O8b8ITDnljFPaN+
- TLSH T1A545912173F98119F5B73B709D768AA52A76BC239EB5864E3248371D1F70AA0CD20737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_539949013d950036620f9d47bffb66ac_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_539949013d950036620f9d47bffb66ac_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_539949013d950036620f9d47bffb66ac_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 3381ead9909c555850ff78f31e0715e03e6adca123fb9d418e7e382039b9ba49
- MD5 539949013d950036620f9d47bffb66ac
- SHA1 8c453c457c3a9ad8834c0393bb2d4ef6386b227c
- SHA512 5e1f868b81d7d446507acb45f77d3f45ebeef738af4cf979b72f60bb4b6fe5b140782eb22e501a1c83fd341bf8b4fb1fcf9c0248c778057a94c1724e49007859
- SSDEEP 12288:pwKfOVRo9yRYBm/4O8b8ITDnljFF0MaHJKkEqRbj+:pxWVeyRYBm/4O8b8ITDnljFPaN+
- TLSH T1A545912173F98119F5B73B709D768AA52A76BC239EB5864E3248371D1F70AA0CD20737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory