General
- Target 2026-06-30_77280879f562eacf4aaacf4bb62fe969_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 790KB
- Sample260701-ew3aeaf18w
- SHA256 8c2417db58953c514c4d1f4825ed651c99fcdaccf2b672504b71ab8cbb9b043f
- MD5 77280879f562eacf4aaacf4bb62fe969
- SHA1 1dc35aeabf6fb2159463b1a71087a2e916b295c3
- SHA512 2366171fece75702e40c222e4496017b3cb389ff4268d7cac3130f7ad0189f1494adc713f52481b5466466069ee3f8d84cfa25f7656c3227264ec6daa2b73c90
- SSDEEP 12288:JwKfOVRo9yRYCz7Q4O8b8ITDnlr0a9gCaYFXkq3yofwLu:JxWVeyRYi7Q4O8b8ITDnlNGO36Lu
- TLSH T1B405D431B294DA25E5AB3E3449A68EA0FA377C156EA087CB36403F1D7B317A1DC25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_77280879f562eacf4aaacf4bb62fe969_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_77280879f562eacf4aaacf4bb62fe969_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_77280879f562eacf4aaacf4bb62fe969_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 790KB
- SHA256 8c2417db58953c514c4d1f4825ed651c99fcdaccf2b672504b71ab8cbb9b043f
- MD5 77280879f562eacf4aaacf4bb62fe969
- SHA1 1dc35aeabf6fb2159463b1a71087a2e916b295c3
- SHA512 2366171fece75702e40c222e4496017b3cb389ff4268d7cac3130f7ad0189f1494adc713f52481b5466466069ee3f8d84cfa25f7656c3227264ec6daa2b73c90
- SSDEEP 12288:JwKfOVRo9yRYCz7Q4O8b8ITDnlr0a9gCaYFXkq3yofwLu:JxWVeyRYi7Q4O8b8ITDnlNGO36Lu
- TLSH T1B405D431B294DA25E5AB3E3449A68EA0FA377C156EA087CB36403F1D7B317A1DC25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory