General
- Target 2026-06-30_b601bf47766dc870a8df988e6bd2eb98_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260701-dqtweae19x
- SHA256 e19c2404df3a4f41721b56c85f110a8579f00db56c179472299399fbecc31237
- MD5 b601bf47766dc870a8df988e6bd2eb98
- SHA1 2e26031033953321103d70cf55b13935c29049b7
- SHA512 87445965c11b6830b5c24250437fb29a8d363314cadf21049a89b0d329cc782d25712d903c6561871e08d6fd2c5bd852c77db5b9925c5308fbac91f841d4b42c
- SSDEEP 24576:RxWVeyRY6FqwzYDteYIpLPLmF4O8b8ITDnluS9zgSo+sqVlZY0/8I1+k:R8Yg24O8b8ITDnlZO6331+k
- TLSH T17465C45073E08A15F1BFAE3058B66E621A3ABD625E7583DF22543B1E3D31750EE20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_b601bf47766dc870a8df988e6bd2eb98_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_b601bf47766dc870a8df988e6bd2eb98_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_b601bf47766dc870a8df988e6bd2eb98_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 e19c2404df3a4f41721b56c85f110a8579f00db56c179472299399fbecc31237
- MD5 b601bf47766dc870a8df988e6bd2eb98
- SHA1 2e26031033953321103d70cf55b13935c29049b7
- SHA512 87445965c11b6830b5c24250437fb29a8d363314cadf21049a89b0d329cc782d25712d903c6561871e08d6fd2c5bd852c77db5b9925c5308fbac91f841d4b42c
- SSDEEP 24576:RxWVeyRY6FqwzYDteYIpLPLmF4O8b8ITDnluS9zgSo+sqVlZY0/8I1+k:R8Yg24O8b8ITDnlZO6331+k
- TLSH T17465C45073E08A15F1BFAE3058B66E621A3ABD625E7583DF22543B1E3D31750EE20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory