General
- Target 2026-07-31_93fde7dd3bedd0491f580a5278f8f558_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 859KB
- Sample260731-f9raqsde23
- SHA256 89e5c544cc3b17b750cfa3c40acc3bc76e65842a0c3de837ecc9951d6b0df8b7
- MD5 93fde7dd3bedd0491f580a5278f8f558
- SHA1 908b50c1b7a6a98a8f99e96465ea740985865de8
- SHA512 2bbaff3e2aefdaa05acc71738ee07db4ebae4d8c3afe651181c44f3111d1f38104cd6a1dece87bc82a0ee3aab6d253e92a8c3342eec4f85c0b07cc5fbdbecdc6
- SSDEEP 12288:WwKfOVRo9yRYNbz4O8b8ITDnljFF0GEqJM:WxWVeyRY5z4O8b8ITDnljFHM
- TLSH T17F15D831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_93fde7dd3bedd0491f580a5278f8f558_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_93fde7dd3bedd0491f580a5278f8f558_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_93fde7dd3bedd0491f580a5278f8f558_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 859KB
- SHA256 89e5c544cc3b17b750cfa3c40acc3bc76e65842a0c3de837ecc9951d6b0df8b7
- MD5 93fde7dd3bedd0491f580a5278f8f558
- SHA1 908b50c1b7a6a98a8f99e96465ea740985865de8
- SHA512 2bbaff3e2aefdaa05acc71738ee07db4ebae4d8c3afe651181c44f3111d1f38104cd6a1dece87bc82a0ee3aab6d253e92a8c3342eec4f85c0b07cc5fbdbecdc6
- SSDEEP 12288:WwKfOVRo9yRYNbz4O8b8ITDnljFF0GEqJM:WxWVeyRY5z4O8b8ITDnljFHM
- TLSH T17F15D831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory