General
- Target 2026-07-01_9169b002b3a2b05750ae54a777acbea5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260701-kxehmact4y
- SHA256 83374c480d4c489f485571526fcd0f45f8c58c212f7f82c7338800c764167d8a
- MD5 9169b002b3a2b05750ae54a777acbea5
- SHA1 1527057f3b186104f57f787bd6accf87a582c504
- SHA512 adb2f05a3858395a0304122333e24ce4dc7662d061abfa83dc6f6b04074c64ec9ba89ab5832d91e30e1ee3409b42da3f7d2861ccd83bdb74e47e79b9b6bef73e
- SSDEEP 24576:hxWVeyRY+Il8BTTc4O8b8ITDnljFv+w+mjxc:h8YTcT44O8b8ITDnljFK
- TLSH T17075C521F3F99119F1B737709D768EB02A76BC22DEB4855E324C371D1BB16A08825B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_9169b002b3a2b05750ae54a777acbea5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_9169b002b3a2b05750ae54a777acbea5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_9169b002b3a2b05750ae54a777acbea5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 83374c480d4c489f485571526fcd0f45f8c58c212f7f82c7338800c764167d8a
- MD5 9169b002b3a2b05750ae54a777acbea5
- SHA1 1527057f3b186104f57f787bd6accf87a582c504
- SHA512 adb2f05a3858395a0304122333e24ce4dc7662d061abfa83dc6f6b04074c64ec9ba89ab5832d91e30e1ee3409b42da3f7d2861ccd83bdb74e47e79b9b6bef73e
- SSDEEP 24576:hxWVeyRY+Il8BTTc4O8b8ITDnljFv+w+mjxc:h8YTcT44O8b8ITDnljFK
- TLSH T17075C521F3F99119F1B737709D768EB02A76BC22DEB4855E324C371D1BB16A08825B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory