General
- Target 2026-07-06_b6418995f787cc7bf0ea547dc497cfcc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 679KB
- Sample260706-wcs13aev3p
- SHA256 80c6eb99ac8cc9216f16679c208570ea81a9faa2354b409e8274956df17be6d2
- MD5 b6418995f787cc7bf0ea547dc497cfcc
- SHA1 e1ca489f01c5fea7ac4717d5f72ce04306856f1d
- SHA512 922916b04e60575f7cdcd4f2ccf8bcb435d6ccf881851ef4e1de5d06a5c43463090e374aa9310cf1322f4aa8fdadbf20d4d2c7b3f9b1fda6c624e492836f920d
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUiW4O8b8ITDnlznZ5QJUEErBENL7LQ:TwKfOVRo9yRYg4O8b8ITDnlr0+BENvLQ
- TLSH T1FBE47131B294CA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_b6418995f787cc7bf0ea547dc497cfcc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_b6418995f787cc7bf0ea547dc497cfcc_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_b6418995f787cc7bf0ea547dc497cfcc_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 679KB
- SHA256 80c6eb99ac8cc9216f16679c208570ea81a9faa2354b409e8274956df17be6d2
- MD5 b6418995f787cc7bf0ea547dc497cfcc
- SHA1 e1ca489f01c5fea7ac4717d5f72ce04306856f1d
- SHA512 922916b04e60575f7cdcd4f2ccf8bcb435d6ccf881851ef4e1de5d06a5c43463090e374aa9310cf1322f4aa8fdadbf20d4d2c7b3f9b1fda6c624e492836f920d
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUiW4O8b8ITDnlznZ5QJUEErBENL7LQ:TwKfOVRo9yRYg4O8b8ITDnlr0+BENvLQ
- TLSH T1FBE47131B294CA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory