General
- Target 2026-07-22_8cf4943f7c5aba9f77dd3a564074ef75_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- Sample260722-gfvlqszbla
- SHA256 f078c6671e4764168d2dfa87a8b7bb5dac56b3b567198482b95fbcf2a7f81968
- MD5 8cf4943f7c5aba9f77dd3a564074ef75
- SHA1 23f57b2e67d1b263ac79be9e8307d30a48ed37f2
- SHA512 f4b0254a01076d89128eb0acd4055cd8ee2db4bec4da05fc06233d54ad2c35886145fcb897bedc786a95894fd4b13506d8e4c089587c476b4514e8fc25dec851
- SSDEEP 24576:mxWVeyRY1CU4O8b8ITDnlb2YA+wXIq6bfF1Z:m8Y194O8b8ITDnlLhwXIrfJ
- TLSH T1F195E523B3E88617F6F3FB3099B45670AA36BC6DAE74D24E6240371E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_8cf4943f7c5aba9f77dd3a564074ef75_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_8cf4943f7c5aba9f77dd3a564074ef75_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_8cf4943f7c5aba9f77dd3a564074ef75_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.9MB
- SHA256 f078c6671e4764168d2dfa87a8b7bb5dac56b3b567198482b95fbcf2a7f81968
- MD5 8cf4943f7c5aba9f77dd3a564074ef75
- SHA1 23f57b2e67d1b263ac79be9e8307d30a48ed37f2
- SHA512 f4b0254a01076d89128eb0acd4055cd8ee2db4bec4da05fc06233d54ad2c35886145fcb897bedc786a95894fd4b13506d8e4c089587c476b4514e8fc25dec851
- SSDEEP 24576:mxWVeyRY1CU4O8b8ITDnlb2YA+wXIq6bfF1Z:m8Y194O8b8ITDnlLhwXIrfJ
- TLSH T1F195E523B3E88617F6F3FB3099B45670AA36BC6DAE74D24E6240371E1971A50CD61723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory