General
- Target 2026-07-20_3af20ff20b9427de0615af7851b21fac_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260720-l43pgaes3m
- SHA256 558dcdf696a14ef9bcc66f903f021644b8b1a2262f0a3138f7521511b462fcb5
- MD5 3af20ff20b9427de0615af7851b21fac
- SHA1 5f9c3b710a1f1a5a54bc0efb6d1272816db6134a
- SHA512 649f0430ac0fb3894a9a0d425ee075bb6d9ba11e35587c28b1d6d0487a268eb0c00ac2f0a4c89a4ce2dacb279fc143f03d01274e278c561afbdaa89dabd85ba8
- SSDEEP 49152:w8YN4O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBv:x5R7Xn4TiRCvJt
- TLSH T14585CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3af20ff20b9427de0615af7851b21fac_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3af20ff20b9427de0615af7851b21fac_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3af20ff20b9427de0615af7851b21fac_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 558dcdf696a14ef9bcc66f903f021644b8b1a2262f0a3138f7521511b462fcb5
- MD5 3af20ff20b9427de0615af7851b21fac
- SHA1 5f9c3b710a1f1a5a54bc0efb6d1272816db6134a
- SHA512 649f0430ac0fb3894a9a0d425ee075bb6d9ba11e35587c28b1d6d0487a268eb0c00ac2f0a4c89a4ce2dacb279fc143f03d01274e278c561afbdaa89dabd85ba8
- SSDEEP 49152:w8YN4O8b8ITDnlJQlSR7Xgo4TiRPnLWvJBv:x5R7Xn4TiRCvJt
- TLSH T14585CF3199808E26D82F7630D1769E653A277D90AFD05BDA22493F197E746B0FC1233B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory