General
- Target 2026-07-28_3663904abfcd93dd243a6769ab38b0de_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 781KB
- Sample260729-bwp4asttfv
- SHA256 7c6b308290604227c8595e35dffc7f87fdb6fcc1ddc95f5da65328bdec0e8cf5
- MD5 3663904abfcd93dd243a6769ab38b0de
- SHA1 a90b5729a86656dfe11a5fa74aa5ba08b5099e5b
- SHA512 a91502acbeee25e89795bb86a12965b857c3018826a29d39be090a267ef7ded9988670f1facdad7c5558f278aa29dce730b0396fb113ab6998a8d8105dc7b2a5
- SSDEEP 24576:WxWVeyRY1Q7+4O8b8ITDnl8Pe0bQBEUOnR1qNc:W8Y74O8b8ITDnl8PeuQBEUOnRwNc
- TLSH T11905F531AAA59025F6F37B3049B54E613566BC26DAF5D64E32803B1D4F3EAB0CC64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_3663904abfcd93dd243a6769ab38b0de_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_3663904abfcd93dd243a6769ab38b0de_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_3663904abfcd93dd243a6769ab38b0de_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 781KB
- SHA256 7c6b308290604227c8595e35dffc7f87fdb6fcc1ddc95f5da65328bdec0e8cf5
- MD5 3663904abfcd93dd243a6769ab38b0de
- SHA1 a90b5729a86656dfe11a5fa74aa5ba08b5099e5b
- SHA512 a91502acbeee25e89795bb86a12965b857c3018826a29d39be090a267ef7ded9988670f1facdad7c5558f278aa29dce730b0396fb113ab6998a8d8105dc7b2a5
- SSDEEP 24576:WxWVeyRY1Q7+4O8b8ITDnl8Pe0bQBEUOnR1qNc:W8Y74O8b8ITDnl8PeuQBEUOnRwNc
- TLSH T11905F531AAA59025F6F37B3049B54E613566BC26DAF5D64E32803B1D4F3EAB0CC64723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory