General
- Target 2026-06-30_159a8d30f01e0060bfaf1301a48f42bb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1001KB
- Sample260701-avytdac17t
- SHA256 c92c31e68e60c4a86bc35c3f5f8f9804adcdce23149ce73bed253140dc487947
- MD5 159a8d30f01e0060bfaf1301a48f42bb
- SHA1 07502e0e9c16b57e4a42e54ec41af41d0b9e814f
- SHA512 c505a3885376226299cb9c775a354e83164cbee30a0f4c942c393628630e5b6dab08c1584fd0a070ca5c2c687439846534869e9f6f5c7dff7b3fa98907d53430
- SSDEEP 24576:sxWVeyRYgB7B4O8b8ITDnl7eutZoh3+M8/:s8YQ4O8b8ITDnl7eutShun/
- TLSH T19E25B52163FD8129F6F377B4A9705EA12EB6FD63DAB4854D224433180BB09A0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_159a8d30f01e0060bfaf1301a48f42bb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_159a8d30f01e0060bfaf1301a48f42bb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_159a8d30f01e0060bfaf1301a48f42bb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1001KB
- SHA256 c92c31e68e60c4a86bc35c3f5f8f9804adcdce23149ce73bed253140dc487947
- MD5 159a8d30f01e0060bfaf1301a48f42bb
- SHA1 07502e0e9c16b57e4a42e54ec41af41d0b9e814f
- SHA512 c505a3885376226299cb9c775a354e83164cbee30a0f4c942c393628630e5b6dab08c1584fd0a070ca5c2c687439846534869e9f6f5c7dff7b3fa98907d53430
- SSDEEP 24576:sxWVeyRYgB7B4O8b8ITDnl7eutZoh3+M8/:s8YQ4O8b8ITDnl7eutShun/
- TLSH T19E25B52163FD8129F6F377B4A9705EA12EB6FD63DAB4854D224433180BB09A0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory