General
- Target 2026-07-22_cf2e29d284c73d06015d3b06aec64c53_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260722-xv2llafp2y
- SHA256 580ef2d40e8f918082f32e56a8b66fedaac3ad451f98853ef4fba752064df111
- MD5 cf2e29d284c73d06015d3b06aec64c53
- SHA1 8091f59f4f4d93968293a786bafe8f2f46328e2d
- SHA512 aba9088f1307fdae420d637c820cef72f844a1357e55d0c9c986f5b8bb38527e528b4a341393b5f59f3abca144f620e353578663bf03dce4805694ab30a4fba9
- SSDEEP 12288:nwKfOVRo9yRYUq1yT4O8b8ITDnlx1+bX1GgocNxE:nxWVeyRYJyT4O8b8ITDnlx1MBDNxE
- TLSH T13F45732066E0CE15F6FF363098714A6429277C115EF48BEE2362BF4E7AB1664DC6131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_cf2e29d284c73d06015d3b06aec64c53_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_cf2e29d284c73d06015d3b06aec64c53_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_cf2e29d284c73d06015d3b06aec64c53_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 580ef2d40e8f918082f32e56a8b66fedaac3ad451f98853ef4fba752064df111
- MD5 cf2e29d284c73d06015d3b06aec64c53
- SHA1 8091f59f4f4d93968293a786bafe8f2f46328e2d
- SHA512 aba9088f1307fdae420d637c820cef72f844a1357e55d0c9c986f5b8bb38527e528b4a341393b5f59f3abca144f620e353578663bf03dce4805694ab30a4fba9
- SSDEEP 12288:nwKfOVRo9yRYUq1yT4O8b8ITDnlx1+bX1GgocNxE:nxWVeyRYJyT4O8b8ITDnlx1MBDNxE
- TLSH T13F45732066E0CE15F6FF363098714A6429277C115EF48BEE2362BF4E7AB1664DC6131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory