General
- Target 2026-07-18_de5aa2fd77c33038467b1e4bca25a05c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 850KB
- Sample260718-gtrf8sh15p
- SHA256 fd83bd7af41aeb9b4891fb13a5b4b8054acf7f9952569052f468c0be07d35ce6
- MD5 de5aa2fd77c33038467b1e4bca25a05c
- SHA1 5640fd84ec8d56270c9e561f2cfe2800d22062e3
- SHA512 5600a18006110e3ae75c40597a75456899776cca1510f65fa38ec260fe85da6441c0c373233b06a127030d90c4b4ab453c3bc204acbebb3a195d91bb2d4e18b4
- SSDEEP 12288:OwKfOVRo9yRYcM7m4O8b8ITDnl0HNN7R0V:OxWVeyRYcM7m4O8b8ITDnl0tIV
- TLSH T19405B82263E84B15F1FB7B7099B549606A677C615E79C7CE22803B0D7A70AA0CD72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_de5aa2fd77c33038467b1e4bca25a05c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_de5aa2fd77c33038467b1e4bca25a05c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_de5aa2fd77c33038467b1e4bca25a05c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 850KB
- SHA256 fd83bd7af41aeb9b4891fb13a5b4b8054acf7f9952569052f468c0be07d35ce6
- MD5 de5aa2fd77c33038467b1e4bca25a05c
- SHA1 5640fd84ec8d56270c9e561f2cfe2800d22062e3
- SHA512 5600a18006110e3ae75c40597a75456899776cca1510f65fa38ec260fe85da6441c0c373233b06a127030d90c4b4ab453c3bc204acbebb3a195d91bb2d4e18b4
- SSDEEP 12288:OwKfOVRo9yRYcM7m4O8b8ITDnl0HNN7R0V:OxWVeyRYcM7m4O8b8ITDnl0tIV
- TLSH T19405B82263E84B15F1FB7B7099B549606A677C615E79C7CE22803B0D7A70AA0CD72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory