General
- Target 2026-07-12_7914436f920c1ea878e9f6abb652c91e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 824KB
- Sample260712-k6awssht31
- SHA256 91d9cceb7fbb35b6b5235a136c27ba53d47a0e3f45ac2a387c18ce0e3db0f76d
- MD5 7914436f920c1ea878e9f6abb652c91e
- SHA1 867e7eb64fe5c36cbf41d2b56374b939e3b17bff
- SHA512 bbd1826bf1bc692bc07498c65057529913065ef09d29a5cf5dbaadc71b1084837d2d7530d167ea03acd888759c6a81783eba8ed5b6deff5138d6865156ce53a9
- SSDEEP 12288:3wKfOVRo9yRYlO744O8b8ITDnlOB8gjImew:3xWVeyRYlO744O8b8ITDnlOG5w
- TLSH T14C05952167E84F15F1BF7B3099B449906A677C51AEB5C7CE12803F4E3A74AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_7914436f920c1ea878e9f6abb652c91e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_7914436f920c1ea878e9f6abb652c91e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_7914436f920c1ea878e9f6abb652c91e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 824KB
- SHA256 91d9cceb7fbb35b6b5235a136c27ba53d47a0e3f45ac2a387c18ce0e3db0f76d
- MD5 7914436f920c1ea878e9f6abb652c91e
- SHA1 867e7eb64fe5c36cbf41d2b56374b939e3b17bff
- SHA512 bbd1826bf1bc692bc07498c65057529913065ef09d29a5cf5dbaadc71b1084837d2d7530d167ea03acd888759c6a81783eba8ed5b6deff5138d6865156ce53a9
- SSDEEP 12288:3wKfOVRo9yRYlO744O8b8ITDnlOB8gjImew:3xWVeyRYlO744O8b8ITDnlOG5w
- TLSH T14C05952167E84F15F1BF7B3099B449906A677C51AEB5C7CE12803F4E3A74AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory