General
- Target 2026-07-12_9af75a37c7b98b93ffab91d035c81a20_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260712-1l6qqsbs8v
- SHA256 cbb5687f36e7f751e0daaea6d940b7d263439565af9f15a34f19fc5a7dcf03c7
- MD5 9af75a37c7b98b93ffab91d035c81a20
- SHA1 a2ee20545d587e4141daf96faab22ff688b77a3a
- SHA512 e94397452f15220001ff30c8d2f571b99d4916092f7a61da87012cb3c6e22351e94fce5b1a5e992bc8f06a2c4f394435f00ed6970c244cdaf04ca35e8b39370b
- SSDEEP 12288:/wKfOVRo9yRYIc4O8b8ITDnljFF0eaHJKkEqZbpy:/xWVeyRYIc4O8b8ITDnljFBaDy
- TLSH T1AB458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_9af75a37c7b98b93ffab91d035c81a20_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_9af75a37c7b98b93ffab91d035c81a20_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_9af75a37c7b98b93ffab91d035c81a20_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 cbb5687f36e7f751e0daaea6d940b7d263439565af9f15a34f19fc5a7dcf03c7
- MD5 9af75a37c7b98b93ffab91d035c81a20
- SHA1 a2ee20545d587e4141daf96faab22ff688b77a3a
- SHA512 e94397452f15220001ff30c8d2f571b99d4916092f7a61da87012cb3c6e22351e94fce5b1a5e992bc8f06a2c4f394435f00ed6970c244cdaf04ca35e8b39370b
- SSDEEP 12288:/wKfOVRo9yRYIc4O8b8ITDnljFF0eaHJKkEqZbpy:/xWVeyRYIc4O8b8ITDnljFBaDy
- TLSH T1AB458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory