General
- Target 2026-07-19_68a4f5e56f9343fa8ead6ce36098ec9c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 945KB
- Sample260720-brjqqady9v
- SHA256 cd8b258f72089aa4a98c32f12305fd0d6cc501eaaa99cd37e96d28be1e1b36ba
- MD5 68a4f5e56f9343fa8ead6ce36098ec9c
- SHA1 237528a950d9b1bc5c03a469476b6f1417cdda34
- SHA512 467e704bbf6a18b8213533641204e66770750124e30c35ac5f05004a77b2c740eb5a68919954804396d329f88be31405635d40ab43fc379ddee1643fcb170d8f
- SSDEEP 24576:OxWVeyRY8vL7l4O8b8ITDnl0DKY7493/JMEWP:O8Ym4O8b8ITDnl0DKY749vJr0
- TLSH T18A25A42563FC8129F5F377B4A9715EA12EB6FC63DAB4854D224823180BB09B0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_68a4f5e56f9343fa8ead6ce36098ec9c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_68a4f5e56f9343fa8ead6ce36098ec9c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_68a4f5e56f9343fa8ead6ce36098ec9c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 945KB
- SHA256 cd8b258f72089aa4a98c32f12305fd0d6cc501eaaa99cd37e96d28be1e1b36ba
- MD5 68a4f5e56f9343fa8ead6ce36098ec9c
- SHA1 237528a950d9b1bc5c03a469476b6f1417cdda34
- SHA512 467e704bbf6a18b8213533641204e66770750124e30c35ac5f05004a77b2c740eb5a68919954804396d329f88be31405635d40ab43fc379ddee1643fcb170d8f
- SSDEEP 24576:OxWVeyRY8vL7l4O8b8ITDnl0DKY7493/JMEWP:O8Ym4O8b8ITDnl0DKY749vJr0
- TLSH T18A25A42563FC8129F5F377B4A9715EA12EB6FC63DAB4854D224823180BB09B0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory