General
- Target 2026-06-28_d8e95ba801702f08b782758a01884f41_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 589KB
- Sample260630-reqw9sgx21
- SHA256 aab13825906560cbd47139b3e9f2bd32322c408fdf97849dc0b588c164a76fa7
- MD5 d8e95ba801702f08b782758a01884f41
- SHA1 88d464c156cc0cb19c1de3f0095d31e860b13380
- SHA512 26366f681f06b8d0a0ad120e5850c7f5b4b26990dffd834f59192a9fc534e5df9c3f768b931b04ad99227e414117ae7770d6dfd06184eb4ec5ede14eb582431d
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUiJO7B4O8b8ITDnlznZQAg8iw+:TwKfOVRo9yRYDO7B4O8b8ITDnl3g8iw+
- TLSH T12ED42A316A908A36D56B3A3045619E6C36176C25CEA34FCB62803FDDFBF16A1CD25237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_d8e95ba801702f08b782758a01884f41_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_d8e95ba801702f08b782758a01884f41_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_d8e95ba801702f08b782758a01884f41_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 589KB
- SHA256 aab13825906560cbd47139b3e9f2bd32322c408fdf97849dc0b588c164a76fa7
- MD5 d8e95ba801702f08b782758a01884f41
- SHA1 88d464c156cc0cb19c1de3f0095d31e860b13380
- SHA512 26366f681f06b8d0a0ad120e5850c7f5b4b26990dffd834f59192a9fc534e5df9c3f768b931b04ad99227e414117ae7770d6dfd06184eb4ec5ede14eb582431d
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUiJO7B4O8b8ITDnlznZQAg8iw+:TwKfOVRo9yRYDO7B4O8b8ITDnl3g8iw+
- TLSH T12ED42A316A908A36D56B3A3045619E6C36176C25CEA34FCB62803FDDFBF16A1CD25237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory