General
- Target 2026-07-23_f4cd73226ae4186dd9c549f6d72383ec_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 939KB
- Sample260723-hffcgsfk6w
- SHA256 aa7e0f9f85daa51979ce287e2eb7e156d2d0df1dc7398e5830e1e9b5a702e0ff
- MD5 f4cd73226ae4186dd9c549f6d72383ec
- SHA1 c8e914f852469fd06b1f90feb77a913671b81668
- SHA512 8fd8e7eb564b053be31da4dec6820224899446c8336c29794711d3bcced03101ffae515740431ff4d8c4fd792686c4b9c7b2f18b6911940bd87bda9b885bac8d
- SSDEEP 12288:GwKfOVRo9yRYu24O8b8ITDnlL0l7ZIUKojV/8y:GxWVeyRYT4O8b8ITDnlKuVop
- TLSH T12D15F831B2E5C025F5B23B348D768EB02A26BC516EB5C64F36483B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_f4cd73226ae4186dd9c549f6d72383ec_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_f4cd73226ae4186dd9c549f6d72383ec_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_f4cd73226ae4186dd9c549f6d72383ec_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 939KB
- SHA256 aa7e0f9f85daa51979ce287e2eb7e156d2d0df1dc7398e5830e1e9b5a702e0ff
- MD5 f4cd73226ae4186dd9c549f6d72383ec
- SHA1 c8e914f852469fd06b1f90feb77a913671b81668
- SHA512 8fd8e7eb564b053be31da4dec6820224899446c8336c29794711d3bcced03101ffae515740431ff4d8c4fd792686c4b9c7b2f18b6911940bd87bda9b885bac8d
- SSDEEP 12288:GwKfOVRo9yRYu24O8b8ITDnlL0l7ZIUKojV/8y:GxWVeyRYT4O8b8ITDnlKuVop
- TLSH T12D15F831B2E5C025F5B23B348D768EB02A26BC516EB5C64F36483B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory