General
- Target 2026-07-23_90a36bdfb386f0172a517d419fdf0f4a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260723-hlrygashmg
- SHA256 896ce3620c20fa6d111cc7cba494b44f194f2f6da6a9e9227a310329ecb6c6ab
- MD5 90a36bdfb386f0172a517d419fdf0f4a
- SHA1 b28bb5d52b34ebc7a84b7fd56bdff423ebc89ac0
- SHA512 32901e343049eac8e6f6d238b44ff7c0eef8199791f6fecff90c8ecae3b6e6ad109576c443fd9d3857c795c3a613b7deb5e69bd4169062097d2a4663eec6d242
- SSDEEP 12288:mwKfOVRo9yRYA0GkLmd4O8b8ITDnljFF0U81SnEqiE:mxWVeyRYXLmd4O8b8ITDnljFGSkE
- TLSH T120350A23F2D4C014E4B727304D7A8EB42A27BC516EB0939B369C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_90a36bdfb386f0172a517d419fdf0f4a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_90a36bdfb386f0172a517d419fdf0f4a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_90a36bdfb386f0172a517d419fdf0f4a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 896ce3620c20fa6d111cc7cba494b44f194f2f6da6a9e9227a310329ecb6c6ab
- MD5 90a36bdfb386f0172a517d419fdf0f4a
- SHA1 b28bb5d52b34ebc7a84b7fd56bdff423ebc89ac0
- SHA512 32901e343049eac8e6f6d238b44ff7c0eef8199791f6fecff90c8ecae3b6e6ad109576c443fd9d3857c795c3a613b7deb5e69bd4169062097d2a4663eec6d242
- SSDEEP 12288:mwKfOVRo9yRYA0GkLmd4O8b8ITDnljFF0U81SnEqiE:mxWVeyRYXLmd4O8b8ITDnljFGSkE
- TLSH T120350A23F2D4C014E4B727304D7A8EB42A27BC516EB0939B369C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory