General
- Target 2026-07-20_dcce6992236d31abf0bedc83d2aee454_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 798KB
- Sample260720-vdqfwsgx2n
- SHA256 fc5c33ff370a7829e13d2ff04f32448bae1b76dc10ee12865fee32eecce1d84d
- MD5 dcce6992236d31abf0bedc83d2aee454
- SHA1 9bd638a8ef883e42d374c6cf74bdd8600a2517d1
- SHA512 cdb839dee504a02de375b34e7a441feee77892bbedcca845db552413fb829a972ac7eabf7c3a5f7de53d5ba24ee59419fb8d19b978c0e0a106bd9eb6c2193bed
- SSDEEP 24576:RxWVeyRYV4IIP8BTG7B4O8b8ITDnlBN0C+:R8YscT04O8b8ITDnlBl+
- TLSH T151051831E2849F26D06F757184B38D7039576C689EE047CB328C7F297BB22A1CC66A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_dcce6992236d31abf0bedc83d2aee454_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_dcce6992236d31abf0bedc83d2aee454_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_dcce6992236d31abf0bedc83d2aee454_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 798KB
- SHA256 fc5c33ff370a7829e13d2ff04f32448bae1b76dc10ee12865fee32eecce1d84d
- MD5 dcce6992236d31abf0bedc83d2aee454
- SHA1 9bd638a8ef883e42d374c6cf74bdd8600a2517d1
- SHA512 cdb839dee504a02de375b34e7a441feee77892bbedcca845db552413fb829a972ac7eabf7c3a5f7de53d5ba24ee59419fb8d19b978c0e0a106bd9eb6c2193bed
- SSDEEP 24576:RxWVeyRYV4IIP8BTG7B4O8b8ITDnlBN0C+:R8YscT04O8b8ITDnlBl+
- TLSH T151051831E2849F26D06F757184B38D7039576C689EE047CB328C7F297BB22A1CC66A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory