General
- Target 2026-07-06_622b7e53ebebea98c4e5c88b0967f74f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 679KB
- Sample260706-wsj34aaz7v
- SHA256 5edf8efce2fc213175624ea7b7ef38ecdad2a7f551ff14019437754adf56f7a5
- MD5 622b7e53ebebea98c4e5c88b0967f74f
- SHA1 b147ba93b3a7fdeefd7f221e03b0db12d094ced1
- SHA512 7bc7a95ccf996b9fcccb80006066b9a375a04521eca2cd6663234f5989f46ca826d8a877cda48b21ebfe079cce397dd01d2b1910c0145b545bf582c4270b6ad5
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUib4O8b8ITDnlznZ5QJUEErBENL7LQ:TwKfOVRo9yRYN4O8b8ITDnlr0+BENvLQ
- TLSH T17DE47131B294CA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_622b7e53ebebea98c4e5c88b0967f74f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_622b7e53ebebea98c4e5c88b0967f74f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_622b7e53ebebea98c4e5c88b0967f74f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 679KB
- SHA256 5edf8efce2fc213175624ea7b7ef38ecdad2a7f551ff14019437754adf56f7a5
- MD5 622b7e53ebebea98c4e5c88b0967f74f
- SHA1 b147ba93b3a7fdeefd7f221e03b0db12d094ced1
- SHA512 7bc7a95ccf996b9fcccb80006066b9a375a04521eca2cd6663234f5989f46ca826d8a877cda48b21ebfe079cce397dd01d2b1910c0145b545bf582c4270b6ad5
- SSDEEP 6144:TwynAtMrOVRkidy9yIGWlUib4O8b8ITDnlznZ5QJUEErBENL7LQ:TwKfOVRo9yRYN4O8b8ITDnlr0+BENvLQ
- TLSH T17DE47131B294CA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory