General
- Target 2026-07-23_9e81f6ef76b14b057cbbc5ef2414aefa_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260723-hjev5ashja
- SHA256 39d3f8fb2764befd38911e22e853016b0e2252fef008a1afe940a5f308a67722
- MD5 9e81f6ef76b14b057cbbc5ef2414aefa
- SHA1 1d0dae1ff1235f5416fa0b39263870a39ffdc2b9
- SHA512 cafc72ee4bb61453d71c76fbe70f3ca57b5f2173d25e3e6dbf4662403f456dc6cfb881694df00c25f1d1f1e97777e1fc7d20df5d2a2dee6181c83534a650f75a
- SSDEEP 12288:HwKfOVRo9yRYymSLLmZ4O8b8ITDnljFF0S87Eq0a:HxWVeyRYSLLmZ4O8b8ITDnljF5a
- TLSH T11135FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_9e81f6ef76b14b057cbbc5ef2414aefa_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_9e81f6ef76b14b057cbbc5ef2414aefa_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_9e81f6ef76b14b057cbbc5ef2414aefa_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 39d3f8fb2764befd38911e22e853016b0e2252fef008a1afe940a5f308a67722
- MD5 9e81f6ef76b14b057cbbc5ef2414aefa
- SHA1 1d0dae1ff1235f5416fa0b39263870a39ffdc2b9
- SHA512 cafc72ee4bb61453d71c76fbe70f3ca57b5f2173d25e3e6dbf4662403f456dc6cfb881694df00c25f1d1f1e97777e1fc7d20df5d2a2dee6181c83534a650f75a
- SSDEEP 12288:HwKfOVRo9yRYymSLLmZ4O8b8ITDnljFF0S87Eq0a:HxWVeyRYSLLmZ4O8b8ITDnljF5a
- TLSH T11135FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory