General
- Target 2026-07-30_39261f929bbbed6ef42460bf1e955107_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260730-2jhfssgm5t
- SHA256 3ed13ed4371107845f4e38ec14662175628f089e667c6838b7558ad536383a20
- MD5 39261f929bbbed6ef42460bf1e955107
- SHA1 4975dc7a0de1c68d6fa505b7c8df772709ee6eec
- SHA512 8207c4b9d89aeaa656f5d700be8869c1f2369425e2af01e5fa61f34d9ba32301b57d5d6d66c32b46c2da83c1a911529faf812c16506f756ab5694fc73532bf71
- SSDEEP 24576:2xWVeyRYffy4O8b8ITDnljFvmXjmXrrkrdxISw:28YS4O8b8ITDnljFvo4IBxY
- TLSH T14D653C62B2D8C025F4B63B348D7A8EA02A26BC155FB5C64F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_39261f929bbbed6ef42460bf1e955107_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_39261f929bbbed6ef42460bf1e955107_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_39261f929bbbed6ef42460bf1e955107_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 3ed13ed4371107845f4e38ec14662175628f089e667c6838b7558ad536383a20
- MD5 39261f929bbbed6ef42460bf1e955107
- SHA1 4975dc7a0de1c68d6fa505b7c8df772709ee6eec
- SHA512 8207c4b9d89aeaa656f5d700be8869c1f2369425e2af01e5fa61f34d9ba32301b57d5d6d66c32b46c2da83c1a911529faf812c16506f756ab5694fc73532bf71
- SSDEEP 24576:2xWVeyRYffy4O8b8ITDnljFvmXjmXrrkrdxISw:28YS4O8b8ITDnljFvo4IBxY
- TLSH T14D653C62B2D8C025F4B63B348D7A8EA02A26BC155FB5C64F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory