General
- Target 2026-06-29_26b7437e33df88f613520409d0820cc7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260630-nylj4sd131
- SHA256 8941a16af905a8e1f3f5a0f157fcb233ce461d89f2eb77ceef9783fdd9a4fec0
- MD5 26b7437e33df88f613520409d0820cc7
- SHA1 0b1ad8175daf70dc9b002204889a254090e0a05b
- SHA512 c22ea831e48b6acb39974a8ca840481b8f1581fb8f621d7c4ed7eaf225cccd75222a2642aeb51d33b318851d29faf0df90793b828a2b457041d0406663d09e3e
- SSDEEP 49152:w8Y44O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBh:xUR7Xn4TiRCvJ7
- TLSH T15785CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_26b7437e33df88f613520409d0820cc7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_26b7437e33df88f613520409d0820cc7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_26b7437e33df88f613520409d0820cc7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 8941a16af905a8e1f3f5a0f157fcb233ce461d89f2eb77ceef9783fdd9a4fec0
- MD5 26b7437e33df88f613520409d0820cc7
- SHA1 0b1ad8175daf70dc9b002204889a254090e0a05b
- SHA512 c22ea831e48b6acb39974a8ca840481b8f1581fb8f621d7c4ed7eaf225cccd75222a2642aeb51d33b318851d29faf0df90793b828a2b457041d0406663d09e3e
- SSDEEP 49152:w8Y44O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBh:xUR7Xn4TiRCvJ7
- TLSH T15785CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory