General
- Target 2026-07-17_2d3d40b93a502b1b73e3a13a48ffc9cd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 945KB
- Sample260718-e2k83sgt4j
- SHA256 7be3665bafe0ed56e3bdcca082e3d818bda6c7fdbaf4e8d7e8f45ea445c1bc75
- MD5 2d3d40b93a502b1b73e3a13a48ffc9cd
- SHA1 02347ba96e2e13e045f8526b6de6489e68cbe396
- SHA512 7f1f0be5959cfda5ac8d3c431e1697dd352cc79bfa9563771c019a3b936478d879c0af57b40c92be3896127d52c2850dcf340bd1326a138f2d51bc84dbf958db
- SSDEEP 24576:OxWVeyRY8ML7l4O8b8ITDnl0DKY7493/JMEWP:O8YV4O8b8ITDnl0DKY749vJr0
- TLSH T1D125A42563FC8129F5F377B4A9715EA12EB6FC63DAB4854D224823180BB09B0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_2d3d40b93a502b1b73e3a13a48ffc9cd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_2d3d40b93a502b1b73e3a13a48ffc9cd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_2d3d40b93a502b1b73e3a13a48ffc9cd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 945KB
- SHA256 7be3665bafe0ed56e3bdcca082e3d818bda6c7fdbaf4e8d7e8f45ea445c1bc75
- MD5 2d3d40b93a502b1b73e3a13a48ffc9cd
- SHA1 02347ba96e2e13e045f8526b6de6489e68cbe396
- SHA512 7f1f0be5959cfda5ac8d3c431e1697dd352cc79bfa9563771c019a3b936478d879c0af57b40c92be3896127d52c2850dcf340bd1326a138f2d51bc84dbf958db
- SSDEEP 24576:OxWVeyRY8ML7l4O8b8ITDnl0DKY7493/JMEWP:O8YV4O8b8ITDnl0DKY749vJr0
- TLSH T1D125A42563FC8129F5F377B4A9715EA12EB6FC63DAB4854D224823180BB09B0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory