General
- Target 2026-07-23_8bd9f54e892ed3060937a6ea72e81cf0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260723-hmvqrahf87
- SHA256 cfee1719f6480a350933fc1482f2164b1fe2439f3c306094d071edf611c86850
- MD5 8bd9f54e892ed3060937a6ea72e81cf0
- SHA1 197f95819df4cf9800bdbfdd207825a71eb0bb50
- SHA512 2b1a38f529f65b896e64486a9ee87b200a3b9d247430e7f335a646c08af385154d488978706699b8199ef768cf2e0e3711e19ce4e512ec69988bb7cee2188c69
- SSDEEP 24576:XxWVeyRYCtZ4O8b8ITDnljFV7VWpCnmhI7eg/:X8Yu4O8b8ITDnljFV7VWpCnmhI7eg/
- TLSH T10D06F7DDA365CD07DC69DE3C44B24D101E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_8bd9f54e892ed3060937a6ea72e81cf0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_8bd9f54e892ed3060937a6ea72e81cf0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_8bd9f54e892ed3060937a6ea72e81cf0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 cfee1719f6480a350933fc1482f2164b1fe2439f3c306094d071edf611c86850
- MD5 8bd9f54e892ed3060937a6ea72e81cf0
- SHA1 197f95819df4cf9800bdbfdd207825a71eb0bb50
- SHA512 2b1a38f529f65b896e64486a9ee87b200a3b9d247430e7f335a646c08af385154d488978706699b8199ef768cf2e0e3711e19ce4e512ec69988bb7cee2188c69
- SSDEEP 24576:XxWVeyRYCtZ4O8b8ITDnljFV7VWpCnmhI7eg/:X8Yu4O8b8ITDnljFV7VWpCnmhI7eg/
- TLSH T10D06F7DDA365CD07DC69DE3C44B24D101E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory