General
- Target 2026-06-30_e8aeb74c569bd8545bd54f5710681fb7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 663KB
- Sample260701-cqe7ksev2x
- SHA256 eca248ffdb1e96bfc890da302e4dfe35de66cd84cab993c4abb9417bfb4aa64b
- MD5 e8aeb74c569bd8545bd54f5710681fb7
- SHA1 86a0c56a5bab2f41faf5e1c43b566a797c7f29f2
- SHA512 948278a35f0a08e6cc5f1adf3ea94656749d518c909a2336deae4a3b6bd62d0b23674699f825f24cef9b9cc5dcb109828aa7f79f10cd60a0d981fa35915484e9
- SSDEEP 12288:TwKfOVRo9yRYmO7d4O8b8ITDnlNp7evPe0bQBE53UOn58tTIEMN+p:TxWVeyRYmO7d4O8b8ITDnl8Pe0bQBEU7
- TLSH T14DE4E332A9409F25D96F753045A68EA0311BAC35CEF18BCB31807F197B3EAB1DC66647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_e8aeb74c569bd8545bd54f5710681fb7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_e8aeb74c569bd8545bd54f5710681fb7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_e8aeb74c569bd8545bd54f5710681fb7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 663KB
- SHA256 eca248ffdb1e96bfc890da302e4dfe35de66cd84cab993c4abb9417bfb4aa64b
- MD5 e8aeb74c569bd8545bd54f5710681fb7
- SHA1 86a0c56a5bab2f41faf5e1c43b566a797c7f29f2
- SHA512 948278a35f0a08e6cc5f1adf3ea94656749d518c909a2336deae4a3b6bd62d0b23674699f825f24cef9b9cc5dcb109828aa7f79f10cd60a0d981fa35915484e9
- SSDEEP 12288:TwKfOVRo9yRYmO7d4O8b8ITDnlNp7evPe0bQBE53UOn58tTIEMN+p:TxWVeyRYmO7d4O8b8ITDnl8Pe0bQBEU7
- TLSH T14DE4E332A9409F25D96F753045A68EA0311BAC35CEF18BCB31807F197B3EAB1DC66647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory