General
- Target 2026-07-22_7d00c137738a7c3e7968a81452f7951f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260722-x7sjfsbd65
- SHA256 157ddf1b4474d7c86018bbab1ba86ab2e49cbb31979481eee9a0f00b7d25680c
- MD5 7d00c137738a7c3e7968a81452f7951f
- SHA1 d1f379898599702e99aa4f4faaa44ad390427d93
- SHA512 281a1245f7996a1e7c6fec89c9331289902e9054677d2d427f6cee99f662394992e3c47362f7b03273fedbc272df778c00dfe3a6ae80dd477b0422a56e09297f
- SSDEEP 12288:7wKfOVRo9yRYZ0ha4O8b8ITDnlA0con6byJS/INFOdpczBXtuIqdZ2KQfftHCMw:7xWVeyRYZ0ha4O8b8ITDnl36Iqd4fF1w
- TLSH T12395A36373E88217F6B3FB3099B85670AA36BC6DAE74D25E6240331E1971A50CD61733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_7d00c137738a7c3e7968a81452f7951f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_7d00c137738a7c3e7968a81452f7951f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_7d00c137738a7c3e7968a81452f7951f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 157ddf1b4474d7c86018bbab1ba86ab2e49cbb31979481eee9a0f00b7d25680c
- MD5 7d00c137738a7c3e7968a81452f7951f
- SHA1 d1f379898599702e99aa4f4faaa44ad390427d93
- SHA512 281a1245f7996a1e7c6fec89c9331289902e9054677d2d427f6cee99f662394992e3c47362f7b03273fedbc272df778c00dfe3a6ae80dd477b0422a56e09297f
- SSDEEP 12288:7wKfOVRo9yRYZ0ha4O8b8ITDnlA0con6byJS/INFOdpczBXtuIqdZ2KQfftHCMw:7xWVeyRYZ0ha4O8b8ITDnl36Iqd4fF1w
- TLSH T12395A36373E88217F6B3FB3099B85670AA36BC6DAE74D25E6240331E1971A50CD61733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory