General
- Target 2026-07-28_6013bc082a739f1a133700048fcc8d44_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260728-ghlfvafc88
- SHA256 8cbb2fe29bc6c219b889c3f1a4055a56c525321e5cb8893da6e167043b996c5d
- MD5 6013bc082a739f1a133700048fcc8d44
- SHA1 b6d3a30aab737a4a92799aa77eff212e6b68008e
- SHA512 80fdeb4175df145d1263e6864b542a28beffaf9f93894e080e6450d87e2b53de01b4e54bffa91f0817461e101343458897ac26928c754e98bb66e5b5035be703
- SSDEEP 24576:GxWVeyRYI1P4O8b8ITDnlcDmsXw13MbZZ:G8Yk4O8b8ITDnlcDmsXw13Y/
- TLSH T10575A42163F8C119F2F3777098705BA51A76BC23DAF8894E2246B74ADBF1960CD21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_6013bc082a739f1a133700048fcc8d44_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_6013bc082a739f1a133700048fcc8d44_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6013bc082a739f1a133700048fcc8d44_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 8cbb2fe29bc6c219b889c3f1a4055a56c525321e5cb8893da6e167043b996c5d
- MD5 6013bc082a739f1a133700048fcc8d44
- SHA1 b6d3a30aab737a4a92799aa77eff212e6b68008e
- SHA512 80fdeb4175df145d1263e6864b542a28beffaf9f93894e080e6450d87e2b53de01b4e54bffa91f0817461e101343458897ac26928c754e98bb66e5b5035be703
- SSDEEP 24576:GxWVeyRYI1P4O8b8ITDnlcDmsXw13MbZZ:G8Yk4O8b8ITDnlcDmsXw13Y/
- TLSH T10575A42163F8C119F2F3777098705BA51A76BC23DAF8894E2246B74ADBF1960CD21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory