General
- Target 2026-07-22_2c60b46cbd01f498711c0a48c3d805c2_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- Sample260722-yklcastdmf
- SHA256 2d209b3c15c63d0c8068e76ffcf275b147b9b0131ad9efb7536017a1ef3b96a4
- MD5 2c60b46cbd01f498711c0a48c3d805c2
- SHA1 581f9742ccf69da0d2294663d361cb40c4597d03
- SHA512 135e65fbd8b136029549aa1bb2c26b505388f51580fcbb88089321dba3ea9ed0c0baa0aa07853b1eb041af437b674dad472305f4b05ebaf9e59460d89c8761b8
- SSDEEP 49152:N8Yj4O8b8ITDnluVSR7Xgo4TiRPnLWvJ7Ihf7:urR7Xn4TiRCvJ7Ihf7
- TLSH T18AD5492373E88617F6F3FB3099B956706A36BC6DAEB4D14E6240331E1971A50ED21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_2c60b46cbd01f498711c0a48c3d805c2_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_2c60b46cbd01f498711c0a48c3d805c2_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_2c60b46cbd01f498711c0a48c3d805c2_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.9MB
- SHA256 2d209b3c15c63d0c8068e76ffcf275b147b9b0131ad9efb7536017a1ef3b96a4
- MD5 2c60b46cbd01f498711c0a48c3d805c2
- SHA1 581f9742ccf69da0d2294663d361cb40c4597d03
- SHA512 135e65fbd8b136029549aa1bb2c26b505388f51580fcbb88089321dba3ea9ed0c0baa0aa07853b1eb041af437b674dad472305f4b05ebaf9e59460d89c8761b8
- SSDEEP 49152:N8Yj4O8b8ITDnluVSR7Xgo4TiRPnLWvJ7Ihf7:urR7Xn4TiRCvJ7Ihf7
- TLSH T18AD5492373E88617F6F3FB3099B956706A36BC6DAEB4D14E6240331E1971A50ED21723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory