General
- Target 2026-07-20_9fd8f1f8dce69d3837917d01748c8af8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260720-c9fbpacz7l
- SHA256 14eb1e517d565768f6719826be438f0e08033fa0b6fb5c6741ca31e71d4bad72
- MD5 9fd8f1f8dce69d3837917d01748c8af8
- SHA1 7eba573eab8db3eff550a4cad42768b2f36d23d0
- SHA512 a67d9bf18e3383fec39afc835aaeb0629b42c66923dd98726ef32c6cbc345d9f725b40b9c352e05a7afe7bcdfeedda24d3f87de20c29d004fd5a455817bc22a3
- SSDEEP 49152:P8YW4O8b8ITDnlRtNSR7Xgo4TiRPnLWvJBe:0jR7Xn4TiRCvJI
- TLSH T1C1A5AD316590CE21E2DB3230946A8F6935176C154FD44BCB2387FF8B7AB22A5FD16227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9fd8f1f8dce69d3837917d01748c8af8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9fd8f1f8dce69d3837917d01748c8af8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9fd8f1f8dce69d3837917d01748c8af8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 14eb1e517d565768f6719826be438f0e08033fa0b6fb5c6741ca31e71d4bad72
- MD5 9fd8f1f8dce69d3837917d01748c8af8
- SHA1 7eba573eab8db3eff550a4cad42768b2f36d23d0
- SHA512 a67d9bf18e3383fec39afc835aaeb0629b42c66923dd98726ef32c6cbc345d9f725b40b9c352e05a7afe7bcdfeedda24d3f87de20c29d004fd5a455817bc22a3
- SSDEEP 49152:P8YW4O8b8ITDnlRtNSR7Xgo4TiRPnLWvJBe:0jR7Xn4TiRCvJI
- TLSH T1C1A5AD316590CE21E2DB3230946A8F6935176C154FD44BCB2387FF8B7AB22A5FD16227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory