General
- Target 2026-07-04_0fd8d165954e148ade1222d49524702f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260704-ye16kagy8p
- SHA256 3bef12659c34e401eb0223ea74f4ba73b9053396416823e2f1fbcb17bffac11a
- MD5 0fd8d165954e148ade1222d49524702f
- SHA1 5b35fd3ca0b95082f3095f10a5fb34e9f737c666
- SHA512 6a3b1ecdf78fe8e759a7cfcfb5d455bbf0ee011b6062baad3db5e0b575b1010aedb0413a163ee3ed2d3a02dca77fc6e95cabbf2fab6c1e527bff862d04a5adea
- SSDEEP 12288:JwKfOVRo9yRYXf4O8b8ITDnlAFF0ZP2yJS/INFOdVrYqHw:JxWVeyRYXf4O8b8ITDnlAFRw
- TLSH T11E35A423B2E5C017F5B6EB304D768AB02A26BC5D6EB5C24F3644371E6F716A0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_0fd8d165954e148ade1222d49524702f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_0fd8d165954e148ade1222d49524702f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_0fd8d165954e148ade1222d49524702f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 3bef12659c34e401eb0223ea74f4ba73b9053396416823e2f1fbcb17bffac11a
- MD5 0fd8d165954e148ade1222d49524702f
- SHA1 5b35fd3ca0b95082f3095f10a5fb34e9f737c666
- SHA512 6a3b1ecdf78fe8e759a7cfcfb5d455bbf0ee011b6062baad3db5e0b575b1010aedb0413a163ee3ed2d3a02dca77fc6e95cabbf2fab6c1e527bff862d04a5adea
- SSDEEP 12288:JwKfOVRo9yRYXf4O8b8ITDnlAFF0ZP2yJS/INFOdVrYqHw:JxWVeyRYXf4O8b8ITDnlAFRw
- TLSH T11E35A423B2E5C017F5B6EB304D768AB02A26BC5D6EB5C24F3644371E6F716A0DD20726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory