General
- Target 2026-07-24_97069c403b81b15e3f79dda7cb53427e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260724-k155rabk21
- SHA256 60c6b857000b4436d82e5a64c44e56784e4276577328ad5f1ebe3299bb41637c
- MD5 97069c403b81b15e3f79dda7cb53427e
- SHA1 e15c1be49d0ca76964ce5ff857b53f46b00ea37b
- SHA512 e76d2dbb26afaf073557f2d55ea1d4599176d995b9e041240785d82cb5537be0e9184de94047b9067478352753d4507863185b1d22b4f18b6d3b75ee4ca8972c
- SSDEEP 12288:EwKfOVRo9yRY/W4O8b8ITDnlSO+bX1GaocN5:ExWVeyRY/W4O8b8ITDnlSOMXDN5
- TLSH T1D045622066E0CE15F6FF763098714A6029277C115EF48BEE1362BF4E7AB2664DC6131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_97069c403b81b15e3f79dda7cb53427e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_97069c403b81b15e3f79dda7cb53427e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_97069c403b81b15e3f79dda7cb53427e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 60c6b857000b4436d82e5a64c44e56784e4276577328ad5f1ebe3299bb41637c
- MD5 97069c403b81b15e3f79dda7cb53427e
- SHA1 e15c1be49d0ca76964ce5ff857b53f46b00ea37b
- SHA512 e76d2dbb26afaf073557f2d55ea1d4599176d995b9e041240785d82cb5537be0e9184de94047b9067478352753d4507863185b1d22b4f18b6d3b75ee4ca8972c
- SSDEEP 12288:EwKfOVRo9yRY/W4O8b8ITDnlSO+bX1GaocN5:ExWVeyRY/W4O8b8ITDnlSOMXDN5
- TLSH T1D045622066E0CE15F6FF763098714A6029277C115EF48BEE1362BF4E7AB2664DC6131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory