General
- Target 2026-07-29_fcbdd36ba70a6f45d3b9238bfccd5a6c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 897KB
- Sample260729-xpvabszhmb
- SHA256 76b047ffa47f019cadbc924d72af53de119a9614ef3103694890aeb1eb26bdd3
- MD5 fcbdd36ba70a6f45d3b9238bfccd5a6c
- SHA1 35130c618d58af5431790355ef89a2ab3912e7de
- SHA512 c5712f646911909ccf53471cc93d3fb6d247a03db6c67237cd3cd7c2917ca3ad10a1e13e668b3e1c68d2b4ecab6907008fa0a14a220ecb84b5cbec6d9702c00c
- SSDEEP 24576:QxWVeyRYjdF1+nLZWMiwzYDteYIp6TE4O8b8ITDnlcieqtT:Q8YlTE4O8b8ITDnlcieqN
- TLSH T1F415C62222E9F852D4593E3014B26E70F630FD1117AF5A4BB259772E4E337E2FE19216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_fcbdd36ba70a6f45d3b9238bfccd5a6c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_fcbdd36ba70a6f45d3b9238bfccd5a6c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_fcbdd36ba70a6f45d3b9238bfccd5a6c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 897KB
- SHA256 76b047ffa47f019cadbc924d72af53de119a9614ef3103694890aeb1eb26bdd3
- MD5 fcbdd36ba70a6f45d3b9238bfccd5a6c
- SHA1 35130c618d58af5431790355ef89a2ab3912e7de
- SHA512 c5712f646911909ccf53471cc93d3fb6d247a03db6c67237cd3cd7c2917ca3ad10a1e13e668b3e1c68d2b4ecab6907008fa0a14a220ecb84b5cbec6d9702c00c
- SSDEEP 24576:QxWVeyRYjdF1+nLZWMiwzYDteYIp6TE4O8b8ITDnlcieqtT:Q8YlTE4O8b8ITDnlcieqN
- TLSH T1F415C62222E9F852D4593E3014B26E70F630FD1117AF5A4BB259772E4E337E2FE19216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory