General
- Target 2026-06-30_7428f3dbaecf7645d61696c90d33b9bc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260701-eyj7lsf191
- SHA256 243ae5e4ce22778e7b0a5f04eca0ee7381400f6c321bf87308e288be162cbfae
- MD5 7428f3dbaecf7645d61696c90d33b9bc
- SHA1 f11f47c91b3f1265fbf6b25a8dee240084656d1e
- SHA512 0b189b7203f1a2e099c4d8065fb7221047166f7f66598dfb0a69e7827c2c90ce28deefc5976e46bd546620d355d68a37fb64b51cdb5ad14ad0de8cd16483a24e
- SSDEEP 24576:QxWVeyRYkwzYDteYIp67w44RE5E/jYKDB8U4jYY0td7kt+X83B1Reqd6+S:Q8Y47w44ROReqd6
- TLSH T159555D223EFE9016C44D2D329BA65720C2F07D71BEE6C726E555321EDAB27C07A1960F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_7428f3dbaecf7645d61696c90d33b9bc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_7428f3dbaecf7645d61696c90d33b9bc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_7428f3dbaecf7645d61696c90d33b9bc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 243ae5e4ce22778e7b0a5f04eca0ee7381400f6c321bf87308e288be162cbfae
- MD5 7428f3dbaecf7645d61696c90d33b9bc
- SHA1 f11f47c91b3f1265fbf6b25a8dee240084656d1e
- SHA512 0b189b7203f1a2e099c4d8065fb7221047166f7f66598dfb0a69e7827c2c90ce28deefc5976e46bd546620d355d68a37fb64b51cdb5ad14ad0de8cd16483a24e
- SSDEEP 24576:QxWVeyRYkwzYDteYIp67w44RE5E/jYKDB8U4jYY0td7kt+X83B1Reqd6+S:Q8Y47w44ROReqd6
- TLSH T159555D223EFE9016C44D2D329BA65720C2F07D71BEE6C726E555321EDAB27C07A1960F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory