General
- Target 2026-07-29_0c502493559c945ee171f116b76fc969_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- Sample260729-1apm3sgm2t
- SHA256 806b093b1c0268b4d6eb93a80637e602ff5b34cc554a746c9db25580108bbc0a
- MD5 0c502493559c945ee171f116b76fc969
- SHA1 0dcfc69ffd5d6d721e032de936ece433c4d2274c
- SHA512 bb284bc0f10df74d7429524c99148b6c0742a3a949e74d0fc4bdffbc933ad36ef4b6e5a704468cfec0fb36499696972fdfc4aff7af670adc3045beb19eed3811
- SSDEEP 49152:r8Y3O5UKDlbnwVtYA4AB+mmHmQFFiEcT7eqW:IYrKVwIAfmHmQDHcfeqW
- TLSH T1521619F0A28C591FEF160EB0203C47F7F2363E490B599ED6699532CA38B77594A1B706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_0c502493559c945ee171f116b76fc969_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_0c502493559c945ee171f116b76fc969_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_0c502493559c945ee171f116b76fc969_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.1MB
- SHA256 806b093b1c0268b4d6eb93a80637e602ff5b34cc554a746c9db25580108bbc0a
- MD5 0c502493559c945ee171f116b76fc969
- SHA1 0dcfc69ffd5d6d721e032de936ece433c4d2274c
- SHA512 bb284bc0f10df74d7429524c99148b6c0742a3a949e74d0fc4bdffbc933ad36ef4b6e5a704468cfec0fb36499696972fdfc4aff7af670adc3045beb19eed3811
- SSDEEP 49152:r8Y3O5UKDlbnwVtYA4AB+mmHmQFFiEcT7eqW:IYrKVwIAfmHmQDHcfeqW
- TLSH T1521619F0A28C591FEF160EB0203C47F7F2363E490B599ED6699532CA38B77594A1B706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory