General
- Target 2026-07-20_83528c5fa310d4df9681877da7df5e29_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 824KB
- Sample260720-npvfnaay9w
- SHA256 7143c9ef6dd0fd7a1031e59b024ff7e67acddeda62a10d9f5b91db669a641d8b
- MD5 83528c5fa310d4df9681877da7df5e29
- SHA1 6294a8fea7174f1150ec044edd076b51fb647303
- SHA512 6be8016195b0f7b0048d271437a118143982e51e978c25d2b8e2720ce89d69a071aa15d64cff848868e579ee8df7ab0bb977005b0ad730f160c126b241ea48c5
- SSDEEP 12288:XwKfOVRo9yRYkO744O8b8ITDnlOB8gjImef:XxWVeyRYkO744O8b8ITDnlOG5f
- TLSH T13C05952167E84F15F1BF7B3099B449906A677C51AEB5C7CE12803F4E3A74AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_83528c5fa310d4df9681877da7df5e29_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_83528c5fa310d4df9681877da7df5e29_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_83528c5fa310d4df9681877da7df5e29_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 824KB
- SHA256 7143c9ef6dd0fd7a1031e59b024ff7e67acddeda62a10d9f5b91db669a641d8b
- MD5 83528c5fa310d4df9681877da7df5e29
- SHA1 6294a8fea7174f1150ec044edd076b51fb647303
- SHA512 6be8016195b0f7b0048d271437a118143982e51e978c25d2b8e2720ce89d69a071aa15d64cff848868e579ee8df7ab0bb977005b0ad730f160c126b241ea48c5
- SSDEEP 12288:XwKfOVRo9yRYkO744O8b8ITDnlOB8gjImef:XxWVeyRYkO744O8b8ITDnlOG5f
- TLSH T13C05952167E84F15F1BF7B3099B449906A677C51AEB5C7CE12803F4E3A74AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory