General
- Target 2026-07-22_ff54405b947da31a66edcf179fa4c00e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 984KB
- Sample260722-gcv34azapf
- SHA256 a3a6cc358c13373c5db0a292074de20b7bdc290430198783af94cf14274f7f86
- MD5 ff54405b947da31a66edcf179fa4c00e
- SHA1 a8124f96d00d718bca4d2347ce5f419799f0338c
- SHA512 25f771c42f78f393011c13597ee985eb65fe5b3b280df2f97e3b3e7dc648c46dee8d5c91a35055144323edff5aac5d8092d71aaac0e500696292657541e1333c
- SSDEEP 12288:0wKfOVRo9yRYjQ7O4O8b8ITDnlz0QwbbaM75Umf:0xWVeyRYjQ7O4O8b8ITDnl9wZPf
- TLSH T12025B62263E94115F5F33B309EB98AA46A677C656FB5D24F2640374E0E70AA0CD32737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_ff54405b947da31a66edcf179fa4c00e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_ff54405b947da31a66edcf179fa4c00e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_ff54405b947da31a66edcf179fa4c00e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 984KB
- SHA256 a3a6cc358c13373c5db0a292074de20b7bdc290430198783af94cf14274f7f86
- MD5 ff54405b947da31a66edcf179fa4c00e
- SHA1 a8124f96d00d718bca4d2347ce5f419799f0338c
- SHA512 25f771c42f78f393011c13597ee985eb65fe5b3b280df2f97e3b3e7dc648c46dee8d5c91a35055144323edff5aac5d8092d71aaac0e500696292657541e1333c
- SSDEEP 12288:0wKfOVRo9yRYjQ7O4O8b8ITDnlz0QwbbaM75Umf:0xWVeyRYjQ7O4O8b8ITDnl9wZPf
- TLSH T12025B62263E94115F5F33B309EB98AA46A677C656FB5D24F2640374E0E70AA0CD32737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory