General
- Target 2026-07-30_3d62a0e810a9196bb8a4ebbfabed418b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260730-2h486sydlf
- SHA256 2ce7ab4e7d8971140446afc5c3926a1d620297c2be9653874ff1aa985f5dbd04
- MD5 3d62a0e810a9196bb8a4ebbfabed418b
- SHA1 49d724c2b6677c6490a531b2f801412e3c12a245
- SHA512 8d318083948aec66fda80aa6a6df5b22c244fb2cb06cd2482c205f5d1a6ae2e9fe4df6d74a76a4f2b0b61b44ab1d5dd3204dcf9f9438d8f0243a1e7f93f513eb
- SSDEEP 24576:/xWVeyRYCnZ4O8b8ITDnljFV7VWpCnmhI7egj:/8YU4O8b8ITDnljFV7VWpCnmhI7egj
- TLSH T15406F7DDA365CD07DC69DE3C44B24D101E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_3d62a0e810a9196bb8a4ebbfabed418b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_3d62a0e810a9196bb8a4ebbfabed418b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_3d62a0e810a9196bb8a4ebbfabed418b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 2ce7ab4e7d8971140446afc5c3926a1d620297c2be9653874ff1aa985f5dbd04
- MD5 3d62a0e810a9196bb8a4ebbfabed418b
- SHA1 49d724c2b6677c6490a531b2f801412e3c12a245
- SHA512 8d318083948aec66fda80aa6a6df5b22c244fb2cb06cd2482c205f5d1a6ae2e9fe4df6d74a76a4f2b0b61b44ab1d5dd3204dcf9f9438d8f0243a1e7f93f513eb
- SSDEEP 24576:/xWVeyRYCnZ4O8b8ITDnljFV7VWpCnmhI7egj:/8YU4O8b8ITDnljFV7VWpCnmhI7egj
- TLSH T15406F7DDA365CD07DC69DE3C44B24D101E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory