General
- Target 2026-07-28_12efd046ddd9dccfa6806561fc7ca08b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.2MB
- Sample260729-b75m5asaqa
- SHA256 0cb2923173a84a559cd60bfba835a40f0b6b2366dbfce0d99a47021b72c1b729
- MD5 12efd046ddd9dccfa6806561fc7ca08b
- SHA1 daae0ff496090a01552f448e0ff8bd91a180c0fd
- SHA512 2b3167c8d40e5c17e126890b57dbc587c40c6f8466ecfbcc166ff17fdc039152340361fe41f148981c839922c79a9d2ab752bd6c2d808948759be430d93b4cd6
- SSDEEP 49152:J8Y48O5UKDlbnwVtYA4AB+mmHmQFFiEcT8Qeqx:ikrKVwIAfmHmQDHcfeqx
- TLSH T1C11619F0B28C9A1FDF1A0EB0242C47F7F2363D490F599ED6689536CE38B67594A06706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_12efd046ddd9dccfa6806561fc7ca08b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_12efd046ddd9dccfa6806561fc7ca08b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_12efd046ddd9dccfa6806561fc7ca08b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.2MB
- SHA256 0cb2923173a84a559cd60bfba835a40f0b6b2366dbfce0d99a47021b72c1b729
- MD5 12efd046ddd9dccfa6806561fc7ca08b
- SHA1 daae0ff496090a01552f448e0ff8bd91a180c0fd
- SHA512 2b3167c8d40e5c17e126890b57dbc587c40c6f8466ecfbcc166ff17fdc039152340361fe41f148981c839922c79a9d2ab752bd6c2d808948759be430d93b4cd6
- SSDEEP 49152:J8Y48O5UKDlbnwVtYA4AB+mmHmQFFiEcT8Qeqx:ikrKVwIAfmHmQDHcfeqx
- TLSH T1C11619F0B28C9A1FDF1A0EB0242C47F7F2363D490F599ED6689536CE38B67594A06706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory