General
- Target 2026-07-20_3ed6c11744426c0f65ecb9556a3b6ee0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260720-yax84sds8k
- SHA256 502da55808d34608814e41793db59a8275d18d8f88f7c756e35b8d739224e462
- MD5 3ed6c11744426c0f65ecb9556a3b6ee0
- SHA1 4ccca72d15592efc855a2f9ff6d97c751584701b
- SHA512 2e3bdba73bbe62a6335f888fcc5a2026058b8d5f9099f16bd14e411c9b760b0833ffd68a0804691b935893c6bd784488635544ff499b891b08923036ef757f41
- SSDEEP 12288:RwKfOVRo9yRY9Nj4O8b8ITDnlL0jd4dGyCy1VZ8TtR:RxWVeyRYP4O8b8ITDnlqWR14tR
- TLSH T18535D631B2E48525F4B33B348D768AA02A26FC629EB5C64F3644775E2F316B1CD31726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_3ed6c11744426c0f65ecb9556a3b6ee0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_3ed6c11744426c0f65ecb9556a3b6ee0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_3ed6c11744426c0f65ecb9556a3b6ee0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 502da55808d34608814e41793db59a8275d18d8f88f7c756e35b8d739224e462
- MD5 3ed6c11744426c0f65ecb9556a3b6ee0
- SHA1 4ccca72d15592efc855a2f9ff6d97c751584701b
- SHA512 2e3bdba73bbe62a6335f888fcc5a2026058b8d5f9099f16bd14e411c9b760b0833ffd68a0804691b935893c6bd784488635544ff499b891b08923036ef757f41
- SSDEEP 12288:RwKfOVRo9yRY9Nj4O8b8ITDnlL0jd4dGyCy1VZ8TtR:RxWVeyRYP4O8b8ITDnlqWR14tR
- TLSH T18535D631B2E48525F4B33B348D768AA02A26FC629EB5C64F3644775E2F316B1CD31726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory