General
- Target 2026-07-18_88864d63e06696bbbae028346b591ddd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 875KB
- Sample260718-h4bzzabz2p
- SHA256 3ae701acf70bc30b1b4764057e672e6e9b5cca74a8b228407aa0bc85928851e4
- MD5 88864d63e06696bbbae028346b591ddd
- SHA1 5c7bd476309b7fa16dce13d6bed2bf851860384a
- SHA512 88d56db6bc4a9de1dcef4aca704b0bc381c91d205bec80cc8524fffccc1531deb175099382b363381a9601ee144589e0ac6b5c179a83298dfc011ca100986d65
- SSDEEP 12288:xwKfOVRo9yRYNM7W4O8b8ITDnlFJgjI00V:xxWVeyRYNM7W4O8b8ITDnlLdV
- TLSH T17115622167E94B19F5FF7B7099B449906A677C61AE75C3CE12803F0D3A70AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_88864d63e06696bbbae028346b591ddd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_88864d63e06696bbbae028346b591ddd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_88864d63e06696bbbae028346b591ddd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 875KB
- SHA256 3ae701acf70bc30b1b4764057e672e6e9b5cca74a8b228407aa0bc85928851e4
- MD5 88864d63e06696bbbae028346b591ddd
- SHA1 5c7bd476309b7fa16dce13d6bed2bf851860384a
- SHA512 88d56db6bc4a9de1dcef4aca704b0bc381c91d205bec80cc8524fffccc1531deb175099382b363381a9601ee144589e0ac6b5c179a83298dfc011ca100986d65
- SSDEEP 12288:xwKfOVRo9yRYNM7W4O8b8ITDnlFJgjI00V:xxWVeyRYNM7W4O8b8ITDnlLdV
- TLSH T17115622167E94B19F5FF7B7099B449906A677C61AE75C3CE12803F0D3A70AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory