General
- Target 2026-07-10_81176b791ebf9e17427a61ca679f727e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 673KB
- Sample260710-2c27macy2r
- SHA256 01d4aab648cd870b11ef696a7e211c6923550a21b23c2575e65b419b9bbc0ee7
- MD5 81176b791ebf9e17427a61ca679f727e
- SHA1 b98e0f040289d43b1dea1af1a798e7fa73cf466a
- SHA512 0f0d12a44e27befa2bea5f4a59ec0c68445d224caa23a27c4f68ef3da00b11c9cbbd30414621c45ed5b9c2acf5ae3f9cf18bdb9105a8f147482ddc50f363062d
- SSDEEP 12288:nwKfOVRo9yRY734O8b8ITDnlr004EZrLB:nxWVeyRYr4O8b8ITDnlJHLB
- TLSH T1F1E47031B294DA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DC25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_81176b791ebf9e17427a61ca679f727e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_81176b791ebf9e17427a61ca679f727e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_81176b791ebf9e17427a61ca679f727e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 673KB
- SHA256 01d4aab648cd870b11ef696a7e211c6923550a21b23c2575e65b419b9bbc0ee7
- MD5 81176b791ebf9e17427a61ca679f727e
- SHA1 b98e0f040289d43b1dea1af1a798e7fa73cf466a
- SHA512 0f0d12a44e27befa2bea5f4a59ec0c68445d224caa23a27c4f68ef3da00b11c9cbbd30414621c45ed5b9c2acf5ae3f9cf18bdb9105a8f147482ddc50f363062d
- SSDEEP 12288:nwKfOVRo9yRY734O8b8ITDnlr004EZrLB:nxWVeyRYr4O8b8ITDnlJHLB
- TLSH T1F1E47031B294DA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DC25317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory