General
- Target 2026-07-19_f2b3ca7dfa2ad12e443de4c9611d8501_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260720-apjghacv5w
- SHA256 14932455a5912b1faf240d06cc7c9224a63b5af1f63a6aa27d6101d8f6df12b0
- MD5 f2b3ca7dfa2ad12e443de4c9611d8501
- SHA1 5890e5d36a782be2520f77f0ada1f6c5a12dac5c
- SHA512 bbcf86908d06e4251e27910ffe88aafc0c06a4324b26dd9fb2345e246f7a6263f6e1ddc234afe47297847773e54ba1d5beb39ea4028bdc34ce3391eb2bec0e6f
- SSDEEP 24576:6xWVeyRYo2L7Y4O8b8ITDnl5KDuM493/PM4Wk:68Ye4O8b8ITDnl5KDuM49vPHL
- TLSH T1E655732163FD8718F1FB7B70A9B45AA11A77BC63DE75C68D22443B0D2A70A60C961733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_f2b3ca7dfa2ad12e443de4c9611d8501_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_f2b3ca7dfa2ad12e443de4c9611d8501_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_f2b3ca7dfa2ad12e443de4c9611d8501_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 14932455a5912b1faf240d06cc7c9224a63b5af1f63a6aa27d6101d8f6df12b0
- MD5 f2b3ca7dfa2ad12e443de4c9611d8501
- SHA1 5890e5d36a782be2520f77f0ada1f6c5a12dac5c
- SHA512 bbcf86908d06e4251e27910ffe88aafc0c06a4324b26dd9fb2345e246f7a6263f6e1ddc234afe47297847773e54ba1d5beb39ea4028bdc34ce3391eb2bec0e6f
- SSDEEP 24576:6xWVeyRYo2L7Y4O8b8ITDnl5KDuM493/PM4Wk:68Ye4O8b8ITDnl5KDuM49vPHL
- TLSH T1E655732163FD8718F1FB7B70A9B45AA11A77BC63DE75C68D22443B0D2A70A60C961733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory