General
- Target 2026-07-30_9db0bb59fc92b550d459ae3ea3db7c77_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260730-ftjkyscb64
- SHA256 f3822834b3b12f3741c6f8057ccde28e082de5678ead51cfbf669ef6eee8c133
- MD5 9db0bb59fc92b550d459ae3ea3db7c77
- SHA1 a41841373fcdeb4af7375fa75d113ab550f46b84
- SHA512 cfea81dc70a42a1e9b948ab6d53c4c1703f20f5bdad3576bf92ef77944a27a2804feae540560285a7ee3c1bce608ea41d0e30a05110fbac8c5a3e109b2c82e21
- SSDEEP 24576:lxWVeyR+ewdF1+nLZWMHfLml4O8b8ITDnltX:l8+Sm4O8b8ITDnlJ
- TLSH T18155A662F2E4C514E1B73B304D7A4EA11A36BC51AEB5D39F32583B0E6F71690ED21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_9db0bb59fc92b550d459ae3ea3db7c77_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_9db0bb59fc92b550d459ae3ea3db7c77_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9db0bb59fc92b550d459ae3ea3db7c77_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 f3822834b3b12f3741c6f8057ccde28e082de5678ead51cfbf669ef6eee8c133
- MD5 9db0bb59fc92b550d459ae3ea3db7c77
- SHA1 a41841373fcdeb4af7375fa75d113ab550f46b84
- SHA512 cfea81dc70a42a1e9b948ab6d53c4c1703f20f5bdad3576bf92ef77944a27a2804feae540560285a7ee3c1bce608ea41d0e30a05110fbac8c5a3e109b2c82e21
- SSDEEP 24576:lxWVeyR+ewdF1+nLZWMHfLml4O8b8ITDnltX:l8+Sm4O8b8ITDnlJ
- TLSH T18155A662F2E4C514E1B73B304D7A4EA11A36BC51AEB5D39F32583B0E6F71690ED21722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory