General
- Target 2026-07-11_7b1eb50a8027b7aa0c5a709c48c4b9f1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 739KB
- Sample260711-thpjqaew6l
- SHA256 e26246394214e83af02c6354f41f02909df8b86ec62d2e13d1bb413e9cfc1c34
- MD5 7b1eb50a8027b7aa0c5a709c48c4b9f1
- SHA1 c9fa635993057f42eaadbc77ceca4eb2aee043d9
- SHA512 30cdba247ccc2d46fa864f845347370cab20784159357e1a6b93bf0056d6449178a86f39a27e07fe161be280c99be0ae0a08333cba8445b1c6262976b2e25d6a
- SSDEEP 12288:QwKfOVRo9yRYk4O8b8ITDnlL0nQWQlVk+Z9:QxWVeyRYk4O8b8ITDnlVrr9
- TLSH T1A5F4F731B2E4D026E4A23A344E768EB47A25BC116FF1878B36483B5E7F716B1DD21316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_7b1eb50a8027b7aa0c5a709c48c4b9f1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_7b1eb50a8027b7aa0c5a709c48c4b9f1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_7b1eb50a8027b7aa0c5a709c48c4b9f1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 739KB
- SHA256 e26246394214e83af02c6354f41f02909df8b86ec62d2e13d1bb413e9cfc1c34
- MD5 7b1eb50a8027b7aa0c5a709c48c4b9f1
- SHA1 c9fa635993057f42eaadbc77ceca4eb2aee043d9
- SHA512 30cdba247ccc2d46fa864f845347370cab20784159357e1a6b93bf0056d6449178a86f39a27e07fe161be280c99be0ae0a08333cba8445b1c6262976b2e25d6a
- SSDEEP 12288:QwKfOVRo9yRYk4O8b8ITDnlL0nQWQlVk+Z9:QxWVeyRYk4O8b8ITDnlVrr9
- TLSH T1A5F4F731B2E4D026E4A23A344E768EB47A25BC116FF1878B36483B5E7F716B1DD21316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory