General
- Target 2026-07-14_7609215544265fd88feb806448b2e64b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260714-hhf2ssat2z
- SHA256 98af309f953c97bd9044e472d382ba623d3d8f1367acdd78b7d5b1bfbc4ef746
- MD5 7609215544265fd88feb806448b2e64b
- SHA1 59d000f8e9c6c72fc23f14c45444c6d2b723d9f0
- SHA512 dd4cd15e6604c3ddc3beaec1684c45207aa8c3e24c3f70c6849aaf93bd873503b9fd4232a11ec32a418fa7e44c7032ee1c7b324224e77c584d9effb79ff9e8f1
- SSDEEP 24576:6xWVeyRYldF1+nLZWMHl4O8b8ITDnluIY6TI:68YOl4O8b8ITDnlJYx
- TLSH T17745B72263F9D024F6FF2B7489754BA12A27BC129E78866F3654371E1E706B0CD24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_7609215544265fd88feb806448b2e64b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_7609215544265fd88feb806448b2e64b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_7609215544265fd88feb806448b2e64b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 98af309f953c97bd9044e472d382ba623d3d8f1367acdd78b7d5b1bfbc4ef746
- MD5 7609215544265fd88feb806448b2e64b
- SHA1 59d000f8e9c6c72fc23f14c45444c6d2b723d9f0
- SHA512 dd4cd15e6604c3ddc3beaec1684c45207aa8c3e24c3f70c6849aaf93bd873503b9fd4232a11ec32a418fa7e44c7032ee1c7b324224e77c584d9effb79ff9e8f1
- SSDEEP 24576:6xWVeyRYldF1+nLZWMHl4O8b8ITDnluIY6TI:68YOl4O8b8ITDnlJYx
- TLSH T17745B72263F9D024F6FF2B7489754BA12A27BC129E78866F3654371E1E706B0CD24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory