General
- Target 2026-07-29_71ccafc0daf9c6db2f5217cf9ccf13e5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.2MB
- Sample260729-y7sd5aed67
- SHA256 cf512eb4cd371a0687a8bf78d13f8c57eba2304af5f465e20beef90f8110fa0f
- MD5 71ccafc0daf9c6db2f5217cf9ccf13e5
- SHA1 eb2714b7f4637c672f8df19460c30e288d3407b2
- SHA512 669cfbfd5eb091ffa7eb8ea8c69a77cd9a2bb04ff1e8ad49aea62eee289f2cab961532b9906d52a473c79cda8b2d601a98ba7ecaf48b2d5f1375ae784e9f6ad4
- SSDEEP 49152:o8YdO5UKDlbnwVtYA4AB+mmHmQFFiEcTSAeq/:ZKrKVwIAfmHmQDHc2Aeq/
- TLSH T1492608F0B28C491FEF160EB0243C47F7F2367E490B599ED6689932CE38B67594A16706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_71ccafc0daf9c6db2f5217cf9ccf13e5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_71ccafc0daf9c6db2f5217cf9ccf13e5_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_71ccafc0daf9c6db2f5217cf9ccf13e5_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 4.2MB
- SHA256 cf512eb4cd371a0687a8bf78d13f8c57eba2304af5f465e20beef90f8110fa0f
- MD5 71ccafc0daf9c6db2f5217cf9ccf13e5
- SHA1 eb2714b7f4637c672f8df19460c30e288d3407b2
- SHA512 669cfbfd5eb091ffa7eb8ea8c69a77cd9a2bb04ff1e8ad49aea62eee289f2cab961532b9906d52a473c79cda8b2d601a98ba7ecaf48b2d5f1375ae784e9f6ad4
- SSDEEP 49152:o8YdO5UKDlbnwVtYA4AB+mmHmQFFiEcTSAeq/:ZKrKVwIAfmHmQDHc2Aeq/
- TLSH T1492608F0B28C491FEF160EB0243C47F7F2367E490B599ED6689932CE38B67594A16706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory