General
- Target 2026-07-08_714749940468e3cef7b8e202d7bba3a0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 679KB
- Sample260708-2bth4aay7z
- SHA256 3a539e3481b4a2f5c0179985fd345714460bac71410cb1c0b54927c733d5dfaa
- MD5 714749940468e3cef7b8e202d7bba3a0
- SHA1 2f3986aae77d9252fba2f79ef7544c89320997cb
- SHA512 7e51f84070e8089ff225277d16d54a1a69a5a1c433a522ea63ec955f718520f042d1673abab0c2449e2f3a3dd8fc441b82ccd4480b80c868fde853986f7d3031
- SSDEEP 6144:DwynAtMrOVRkidy9yIGWlUi+4O8b8ITDnlznZ5QJUEErBENL7L/:DwKfOVRo9yRYc4O8b8ITDnlr0+BENvL/
- TLSH T137E47131B294CA25D5AB3E3489A58EB0EA377C11AEA487CB36403F1D7B317A1DD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_714749940468e3cef7b8e202d7bba3a0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_714749940468e3cef7b8e202d7bba3a0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_714749940468e3cef7b8e202d7bba3a0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 679KB
- SHA256 3a539e3481b4a2f5c0179985fd345714460bac71410cb1c0b54927c733d5dfaa
- MD5 714749940468e3cef7b8e202d7bba3a0
- SHA1 2f3986aae77d9252fba2f79ef7544c89320997cb
- SHA512 7e51f84070e8089ff225277d16d54a1a69a5a1c433a522ea63ec955f718520f042d1673abab0c2449e2f3a3dd8fc441b82ccd4480b80c868fde853986f7d3031
- SSDEEP 6144:DwynAtMrOVRkidy9yIGWlUi+4O8b8ITDnlznZ5QJUEErBENL7L/:DwKfOVRo9yRYc4O8b8ITDnlr0+BENvL/
- TLSH T137E47131B294CA25D5AB3E3489A58EB0EA377C11AEA487CB36403F1D7B317A1DD25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory