General
- Target 2026-07-30_fc808553ea53a9d8ed0f94d64baf32d4_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 886KB
- Sample260730-1w1bpsxhlg
- SHA256 0548c1410c6168a1fb3a9c2e23c31ddb7858a0c8339bd810f642832c42ff51c0
- MD5 fc808553ea53a9d8ed0f94d64baf32d4
- SHA1 a35861a7de463964c1088683ebd14addb3d9d75d
- SHA512 c7bc1a124e729b79a54b88f2a31d15fae807e0116220575c044f76c558c872e78a0ca7caf5abb9bef39031a05e52985ef4e1fee0aa0e84c20c06076ee0c599a7
- SSDEEP 6144:gwynAtMrOVRkidy9yIGWlUiCQk4O8b8ITDnlznZJQJUEfAiVkElax/FscYrd1jim:gwKfOVRo9yRYI34O8b8ITDnlL0IiV/8A
- TLSH T19B15E631B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_fc808553ea53a9d8ed0f94d64baf32d4_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_fc808553ea53a9d8ed0f94d64baf32d4_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_fc808553ea53a9d8ed0f94d64baf32d4_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 886KB
- SHA256 0548c1410c6168a1fb3a9c2e23c31ddb7858a0c8339bd810f642832c42ff51c0
- MD5 fc808553ea53a9d8ed0f94d64baf32d4
- SHA1 a35861a7de463964c1088683ebd14addb3d9d75d
- SHA512 c7bc1a124e729b79a54b88f2a31d15fae807e0116220575c044f76c558c872e78a0ca7caf5abb9bef39031a05e52985ef4e1fee0aa0e84c20c06076ee0c599a7
- SSDEEP 6144:gwynAtMrOVRkidy9yIGWlUiCQk4O8b8ITDnlznZJQJUEfAiVkElax/FscYrd1jim:gwKfOVRo9yRYI34O8b8ITDnlL0IiV/8A
- TLSH T19B15E631B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory