General
- Target 2026-07-23_13f0aeea00ad4439c0567a30c28d3cbd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- Sample260723-jsvtdaywhz
- SHA256 88e701992680ef7425f6944c7e0401f4ae2fe1a9ceb14270565b9b8839b47b76
- MD5 13f0aeea00ad4439c0567a30c28d3cbd
- SHA1 c916dcaba9d4061a9a31e43a1f63738254143494
- SHA512 722f955388ded19132a42d31450b490139a3738be78aed2fa86d1b761de8fbd83543bf1742888e513d20eececd7853fbcc1bfc3319fc5aa4bcccc190aac6eb08
- SSDEEP 12288:gwKfOVRo9yRY36Co4i4O8b8ITDnlL0IiV/8m:gxWVeyRY36Cli4O8b8ITDnl8
- TLSH T10115E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_13f0aeea00ad4439c0567a30c28d3cbd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_13f0aeea00ad4439c0567a30c28d3cbd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_13f0aeea00ad4439c0567a30c28d3cbd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- SHA256 88e701992680ef7425f6944c7e0401f4ae2fe1a9ceb14270565b9b8839b47b76
- MD5 13f0aeea00ad4439c0567a30c28d3cbd
- SHA1 c916dcaba9d4061a9a31e43a1f63738254143494
- SHA512 722f955388ded19132a42d31450b490139a3738be78aed2fa86d1b761de8fbd83543bf1742888e513d20eececd7853fbcc1bfc3319fc5aa4bcccc190aac6eb08
- SSDEEP 12288:gwKfOVRo9yRY36Co4i4O8b8ITDnlL0IiV/8m:gxWVeyRY36Cli4O8b8ITDnl8
- TLSH T10115E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory