General
- Target 2026-07-19_58a02bf2eeb9535194ef0a9c15fb0f22_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260719-2hmdcsg19s
- SHA256 4cafea5cdcdb436c1890228f67b28d0f68f85f4cbdcab11ae43242b5cd05bec9
- MD5 58a02bf2eeb9535194ef0a9c15fb0f22
- SHA1 d786ae8d16f2739a56e56f28c51df2ef1a238a04
- SHA512 342b95a300e9c8e23a6826ad8ae2153e039014f73a361404ac30fc7155bec25f39590f7c3be6ab4ee3a7360fbec5b8c896e5765e1a6ed13dcdb2cd80ef5299b4
- SSDEEP 49152:K8Y/F4O8b8ITDnltozsobQrhRR+mibhv0DmT6I6DIi:vslsobQrhj9JIbi
- TLSH T1BFB58D22A3E84715F1F73B7099F549906B3B7C61AE75C78E12817B0E2970AA0DD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_58a02bf2eeb9535194ef0a9c15fb0f22_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_58a02bf2eeb9535194ef0a9c15fb0f22_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_58a02bf2eeb9535194ef0a9c15fb0f22_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 4cafea5cdcdb436c1890228f67b28d0f68f85f4cbdcab11ae43242b5cd05bec9
- MD5 58a02bf2eeb9535194ef0a9c15fb0f22
- SHA1 d786ae8d16f2739a56e56f28c51df2ef1a238a04
- SHA512 342b95a300e9c8e23a6826ad8ae2153e039014f73a361404ac30fc7155bec25f39590f7c3be6ab4ee3a7360fbec5b8c896e5765e1a6ed13dcdb2cd80ef5299b4
- SSDEEP 49152:K8Y/F4O8b8ITDnltozsobQrhRR+mibhv0DmT6I6DIi:vslsobQrhj9JIbi
- TLSH T1BFB58D22A3E84715F1F73B7099F549906B3B7C61AE75C78E12817B0E2970AA0DD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory