General
- Target 2026-07-06_0d94a0956627c57bb91dae77383e2c9f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 6.9MB
- Sample260706-2m7vvsh16m
- SHA256 8214dffedc6d42ea78c38b061941f9a1ac0370db6fe712b19655f1ccf7b32862
- MD5 0d94a0956627c57bb91dae77383e2c9f
- SHA1 6c955f604653d69ffcbada10236d4d7252589d77
- SHA512 879312784795185c77dfbbd4f645ca1b9554fb25f813a10603e439f23a29bbfb82b25538f339ffb9160ab4cd92875cec08cb05c18363897fd6273917adef8fb5
- SSDEEP 49152:n8YjNjFuGtmRA4O8b8ITDnlFFP0FO+58z1iV:8CuGtmRZP0FO+JV
- TLSH T17276D657BA74EC1EF76879F2FBA485A0DD187C528DA2A41B3170BF5E28329404AC73D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_0d94a0956627c57bb91dae77383e2c9f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_0d94a0956627c57bb91dae77383e2c9f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_0d94a0956627c57bb91dae77383e2c9f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 6.9MB
- SHA256 8214dffedc6d42ea78c38b061941f9a1ac0370db6fe712b19655f1ccf7b32862
- MD5 0d94a0956627c57bb91dae77383e2c9f
- SHA1 6c955f604653d69ffcbada10236d4d7252589d77
- SHA512 879312784795185c77dfbbd4f645ca1b9554fb25f813a10603e439f23a29bbfb82b25538f339ffb9160ab4cd92875cec08cb05c18363897fd6273917adef8fb5
- SSDEEP 49152:n8YjNjFuGtmRA4O8b8ITDnlFFP0FO+58z1iV:8CuGtmRZP0FO+JV
- TLSH T17276D657BA74EC1EF76879F2FBA485A0DD187C528DA2A41B3170BF5E28329404AC73D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory