General
- Target 2026-06-30_31a7f65703c7f191f978ae9b1cd830b1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260701-gghcsse19k
- SHA256 45589a02281f032f7fce03ff8fd3cdfba1dc9b1b280ea88b0e7239caa26a0d23
- MD5 31a7f65703c7f191f978ae9b1cd830b1
- SHA1 15812baac10c1def569cd75c52065d32e065105c
- SHA512 2b7d170f2ac2459abeb694069b9fccf50ca98e4b167c5bc79c9505ce026b45a28d218ef4b127b0fb3282970df0dc737adfe0105494ed12f5007cd59ea5a95fde
- SSDEEP 49152:R8Yh4O8b8ITDnla3yd2OluON4fA9uLLwL+fZx/X3yd2OluON4fA9uk3yd2OluONh:6MLwL+fZx/5
- TLSH T1E28518B16B508F65E01B217084168A736B83AC7BDD8F62C73041BF1A7F7D2A298D65C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_31a7f65703c7f191f978ae9b1cd830b1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_31a7f65703c7f191f978ae9b1cd830b1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_31a7f65703c7f191f978ae9b1cd830b1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 45589a02281f032f7fce03ff8fd3cdfba1dc9b1b280ea88b0e7239caa26a0d23
- MD5 31a7f65703c7f191f978ae9b1cd830b1
- SHA1 15812baac10c1def569cd75c52065d32e065105c
- SHA512 2b7d170f2ac2459abeb694069b9fccf50ca98e4b167c5bc79c9505ce026b45a28d218ef4b127b0fb3282970df0dc737adfe0105494ed12f5007cd59ea5a95fde
- SSDEEP 49152:R8Yh4O8b8ITDnla3yd2OluON4fA9uLLwL+fZx/X3yd2OluON4fA9uk3yd2OluONh:6MLwL+fZx/5
- TLSH T1E28518B16B508F65E01B217084168A736B83AC7BDD8F62C73041BF1A7F7D2A298D65C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory