General
- Target 2026-07-23_663987bed189f5aac1fa3d7313bccbdf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 886KB
- Sample260723-hrdm2ax1bv
- SHA256 a17638c1b69db961a55b1a865ddf7ef02b0b5be4a357cd9046d681d2cfa0fa1b
- MD5 663987bed189f5aac1fa3d7313bccbdf
- SHA1 369717457ef9d72ed5a419a86cfeac12d2934db3
- SHA512 8128200e98463db3462b297400d753f24de3c65bf02c3a127a3f252c7d7d200c09fb790bc28a2221548ad527aa52912d0932821884ff244860855c5897c4db97
- SSDEEP 6144:owynAtMrOVRkidy9yIGWlUiu7d4O8b8ITDnlznZJQJUEfAiVkElax/FscYrd1jif:owKfOVRo9yRY8p4O8b8ITDnlL0IiV/8B
- TLSH T19415E631B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_663987bed189f5aac1fa3d7313bccbdf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_663987bed189f5aac1fa3d7313bccbdf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_663987bed189f5aac1fa3d7313bccbdf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 886KB
- SHA256 a17638c1b69db961a55b1a865ddf7ef02b0b5be4a357cd9046d681d2cfa0fa1b
- MD5 663987bed189f5aac1fa3d7313bccbdf
- SHA1 369717457ef9d72ed5a419a86cfeac12d2934db3
- SHA512 8128200e98463db3462b297400d753f24de3c65bf02c3a127a3f252c7d7d200c09fb790bc28a2221548ad527aa52912d0932821884ff244860855c5897c4db97
- SSDEEP 6144:owynAtMrOVRkidy9yIGWlUiu7d4O8b8ITDnlznZJQJUEfAiVkElax/FscYrd1jif:owKfOVRo9yRY8p4O8b8ITDnlL0IiV/8B
- TLSH T19415E631B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory