General
- Target 2026-07-14_840c9ba6746e398ba114b6dab90edeb1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260714-hefxmaas4t
- SHA256 f7d006a02344eefd77d148c5c6e702dcb50aed42d8a9e48f26e514ce8906f5bc
- MD5 840c9ba6746e398ba114b6dab90edeb1
- SHA1 84476ca59355db86cb4f248585d62441605a76c6
- SHA512 c85ca7c683a824495662312b69c69233ed989479be5ce308b8f485898f8ece434b748910abd395f2895c4846de4b05999b7eb7609149ba15c39f2c9cc812c67f
- SSDEEP 24576:axWVeyRYQOdF1+nLZWMHl4O8b8ITDnl4IY6ND:a8Y6l4O8b8ITDnlLYk
- TLSH T18C45B72263F9D014F6FF2B7489754BA12A27BC129E78866F3654371E1E706B0CD2472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_840c9ba6746e398ba114b6dab90edeb1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_840c9ba6746e398ba114b6dab90edeb1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_840c9ba6746e398ba114b6dab90edeb1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 f7d006a02344eefd77d148c5c6e702dcb50aed42d8a9e48f26e514ce8906f5bc
- MD5 840c9ba6746e398ba114b6dab90edeb1
- SHA1 84476ca59355db86cb4f248585d62441605a76c6
- SHA512 c85ca7c683a824495662312b69c69233ed989479be5ce308b8f485898f8ece434b748910abd395f2895c4846de4b05999b7eb7609149ba15c39f2c9cc812c67f
- SSDEEP 24576:axWVeyRYQOdF1+nLZWMHl4O8b8ITDnl4IY6ND:a8Y6l4O8b8ITDnlLYk
- TLSH T18C45B72263F9D014F6FF2B7489754BA12A27BC129E78866F3654371E1E706B0CD2472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory