General
- Target 2026-07-20_e7cbcfbb5e3fe718fec5d6a1c6d8b050_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 874KB
- Sample260720-rdjrkact7m
- SHA256 c7a528f1a5bf31e299bb0de7f4c14bf81ed67bd4bad3e241ae8a9f1ad6870bcd
- MD5 e7cbcfbb5e3fe718fec5d6a1c6d8b050
- SHA1 0e341dcd782ff6fed9d78071016514e1f6589691
- SHA512 a2226f718501e429e43e5ed320060953be6b9b108e853f27dfec07678b090c73c6eb09cf3d28a4c015daa58e979e6437c749d5fc87d3b96bdb382bb8b01252df
- SSDEEP 12288:dwKfOVRo9yRYHM7W4O8b8ITDnlFJgjI00Z:dxWVeyRYHM7W4O8b8ITDnlLdZ
- TLSH T1A815622163E94B19F5FF7B7099B449A06A677C51AE75C3CE12803F4D3A70AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_e7cbcfbb5e3fe718fec5d6a1c6d8b050_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_e7cbcfbb5e3fe718fec5d6a1c6d8b050_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_e7cbcfbb5e3fe718fec5d6a1c6d8b050_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 874KB
- SHA256 c7a528f1a5bf31e299bb0de7f4c14bf81ed67bd4bad3e241ae8a9f1ad6870bcd
- MD5 e7cbcfbb5e3fe718fec5d6a1c6d8b050
- SHA1 0e341dcd782ff6fed9d78071016514e1f6589691
- SHA512 a2226f718501e429e43e5ed320060953be6b9b108e853f27dfec07678b090c73c6eb09cf3d28a4c015daa58e979e6437c749d5fc87d3b96bdb382bb8b01252df
- SSDEEP 12288:dwKfOVRo9yRYHM7W4O8b8ITDnlFJgjI00Z:dxWVeyRYHM7W4O8b8ITDnlLdZ
- TLSH T1A815622163E94B19F5FF7B7099B449A06A677C51AE75C3CE12803F4D3A70AA0CD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory