General
- Target 2026-07-13_83c0bf0195060328220e24c4209e9393_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260714-bfpgtsby9k
- SHA256 eedc43dd941fd0d738194c48a342144c1366b426f404478d69bbbe754f4ea0d4
- MD5 83c0bf0195060328220e24c4209e9393
- SHA1 888e3015904cc6b22c23196d1777183152a5b1de
- SHA512 4e10edd6a6ddcff23884bb54ba896ba2dd76c3acf1b0e3454de080b5194f35814faf2c36422199d9a9b4999248959306c19a80057d52d3d0290cf999825c9b01
- SSDEEP 12288:1wKfOVRo9yRYMM4O8b8ITDnlL0vQmd4dGyCy1VZ8EKs:1xWVeyRYn4O8b8ITDnltUWR1rKs
- TLSH T11835E831B2E48125F4B33B349D768EA02A26BC629EB5C64F3644375E2F716B1CD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_83c0bf0195060328220e24c4209e9393_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_83c0bf0195060328220e24c4209e9393_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_83c0bf0195060328220e24c4209e9393_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 eedc43dd941fd0d738194c48a342144c1366b426f404478d69bbbe754f4ea0d4
- MD5 83c0bf0195060328220e24c4209e9393
- SHA1 888e3015904cc6b22c23196d1777183152a5b1de
- SHA512 4e10edd6a6ddcff23884bb54ba896ba2dd76c3acf1b0e3454de080b5194f35814faf2c36422199d9a9b4999248959306c19a80057d52d3d0290cf999825c9b01
- SSDEEP 12288:1wKfOVRo9yRYMM4O8b8ITDnlL0vQmd4dGyCy1VZ8EKs:1xWVeyRYn4O8b8ITDnltUWR1rKs
- TLSH T11835E831B2E48125F4B33B349D768EA02A26BC629EB5C64F3644375E2F716B1CD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory