General
- Target 2026-07-05_bdf0f00e56a9e6748c8558a20aa7c38e_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260705-tcp83ahs3m
- SHA256 44302177a5f1319d1d04ed89c20d8317dbac6a92d57af25242ac74a17280e2f0
- MD5 bdf0f00e56a9e6748c8558a20aa7c38e
- SHA1 03c6c0cb94901b4406d139cea5de9ccb8497d1ae
- SHA512 a4f67c06484306e1ef92e168b1af69b2bf04b8327bc7b5a8fc94ccfca4cfde33c178d0283684bef5aa28e56f77010020c4800de07e0b546563d04d3c218abe48
- SSDEEP 12288:FwKfOVRo9yRYDSc4O8b8ITDnl20xeQib4IkQWbTqWLsWhE:FxWVeyRYuc4O8b8ITDnlbjE
- TLSH T1E785DA2612E8C1EAE2BA3630DC69B7F505623C65E971DE1B7D007E1A79307A0947373E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_bdf0f00e56a9e6748c8558a20aa7c38e_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_bdf0f00e56a9e6748c8558a20aa7c38e_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_bdf0f00e56a9e6748c8558a20aa7c38e_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 44302177a5f1319d1d04ed89c20d8317dbac6a92d57af25242ac74a17280e2f0
- MD5 bdf0f00e56a9e6748c8558a20aa7c38e
- SHA1 03c6c0cb94901b4406d139cea5de9ccb8497d1ae
- SHA512 a4f67c06484306e1ef92e168b1af69b2bf04b8327bc7b5a8fc94ccfca4cfde33c178d0283684bef5aa28e56f77010020c4800de07e0b546563d04d3c218abe48
- SSDEEP 12288:FwKfOVRo9yRYDSc4O8b8ITDnl20xeQib4IkQWbTqWLsWhE:FxWVeyRYuc4O8b8ITDnlbjE
- TLSH T1E785DA2612E8C1EAE2BA3630DC69B7F505623C65E971DE1B7D007E1A79307A0947373E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory