General
- Target 2026-07-20_f3406b62c1647cf2007acfa9c7cee617_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260720-xc2hwadv8w
- SHA256 dbce7f79ff5e43eff6b8f138972dca991f1f2c53d3b4414d0f494bd5cc4091f2
- MD5 f3406b62c1647cf2007acfa9c7cee617
- SHA1 c21d26f67a19396e33639df092ad0041a745145b
- SHA512 3cc1a432e12447831cd00f66edcdf1fe2776dc2d09c59501326fbe0ea2a2ef93e6416caa20bf2a313f5c59d5c7d9ddafc8d3b58298adf415e79ef3a4826c1957
- SSDEEP 12288:pwKfOVRo9yRYMe4O8b8ITDnlL0jd4dGyCy1VZ84t2:pxWVeyRYV4O8b8ITDnlqWR1Ht2
- TLSH T18935D731B2E48525F4B33B348D768AA02A26FC629EB5C64F3644775E2F316B1CD31726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_f3406b62c1647cf2007acfa9c7cee617_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_f3406b62c1647cf2007acfa9c7cee617_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f3406b62c1647cf2007acfa9c7cee617_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 dbce7f79ff5e43eff6b8f138972dca991f1f2c53d3b4414d0f494bd5cc4091f2
- MD5 f3406b62c1647cf2007acfa9c7cee617
- SHA1 c21d26f67a19396e33639df092ad0041a745145b
- SHA512 3cc1a432e12447831cd00f66edcdf1fe2776dc2d09c59501326fbe0ea2a2ef93e6416caa20bf2a313f5c59d5c7d9ddafc8d3b58298adf415e79ef3a4826c1957
- SSDEEP 12288:pwKfOVRo9yRYMe4O8b8ITDnlL0jd4dGyCy1VZ84t2:pxWVeyRYV4O8b8ITDnlqWR1Ht2
- TLSH T18935D731B2E48525F4B33B348D768AA02A26FC629EB5C64F3644775E2F316B1CD31726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory