General
- Target 2026-07-27_9df8726e9d59fa79b12356afd27b4765_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 929KB
- Sample260727-rqb79avbpb
- SHA256 c83b7e8eded51dad56bc70880510d20bf10eeded71c71357ab37bbade81229f1
- MD5 9df8726e9d59fa79b12356afd27b4765
- SHA1 f9e4e53aba6055baf65068d2c740bc0153a505c7
- SHA512 b9d755ff570cc60ae9cb7ddead9d46b791d67ce20e3e4c705562d86370869442639ca5d601943ea72955c7478121e7f99e6c53dc687b6a81c0e4ce4d8bbd6c07
- SSDEEP 24576:3xWVeyRYARdF1+nLZWMHW4O8b8ITDnlSsU:38Y9W4O8b8ITDnl3U
- TLSH T1D815952167E94B15F1FB7B3099B54A506A67BC51AE75C3CE22803F0D2E70AA0DD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_9df8726e9d59fa79b12356afd27b4765_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_9df8726e9d59fa79b12356afd27b4765_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_9df8726e9d59fa79b12356afd27b4765_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 929KB
- SHA256 c83b7e8eded51dad56bc70880510d20bf10eeded71c71357ab37bbade81229f1
- MD5 9df8726e9d59fa79b12356afd27b4765
- SHA1 f9e4e53aba6055baf65068d2c740bc0153a505c7
- SHA512 b9d755ff570cc60ae9cb7ddead9d46b791d67ce20e3e4c705562d86370869442639ca5d601943ea72955c7478121e7f99e6c53dc687b6a81c0e4ce4d8bbd6c07
- SSDEEP 24576:3xWVeyRYARdF1+nLZWMHW4O8b8ITDnlSsU:38Y9W4O8b8ITDnl3U
- TLSH T1D815952167E94B15F1FB7B3099B54A506A67BC51AE75C3CE22803F0D2E70AA0DD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory