General
- Target 2026-07-31_8600de93b5ad4e4ccbbfc6a961869ced_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- Sample260731-gde39sbj51
- SHA256 8a65a90d0a3421bb5563b739208749ce493fe9dd4912160af5dba2ad746c07fc
- MD5 8600de93b5ad4e4ccbbfc6a961869ced
- SHA1 3a0a38135b26a25ec9adbed7d9d964abd3e3976b
- SHA512 4582a371262b0408f65440b1a67e6ae793606a3c5b31ad18f5e06cfb48d1b6b6971ece449d1685db8d00b83845ef6a5957d108a57b808577d3abfbdc89a5840b
- SSDEEP 49152:e8Yy4O8b8ITDnljFv5r2xM1MQ6xKF+LWngB7GFM/K2HX:rmv5r2u65ysWngBSu/HX
- TLSH T1F406F423DFB58414E0729F35C8236AA019323D5987685A4F1AA4B63F4EF37426E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8600de93b5ad4e4ccbbfc6a961869ced_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_8600de93b5ad4e4ccbbfc6a961869ced_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8600de93b5ad4e4ccbbfc6a961869ced_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- SHA256 8a65a90d0a3421bb5563b739208749ce493fe9dd4912160af5dba2ad746c07fc
- MD5 8600de93b5ad4e4ccbbfc6a961869ced
- SHA1 3a0a38135b26a25ec9adbed7d9d964abd3e3976b
- SHA512 4582a371262b0408f65440b1a67e6ae793606a3c5b31ad18f5e06cfb48d1b6b6971ece449d1685db8d00b83845ef6a5957d108a57b808577d3abfbdc89a5840b
- SSDEEP 49152:e8Yy4O8b8ITDnljFv5r2xM1MQ6xKF+LWngB7GFM/K2HX:rmv5r2u65ysWngBSu/HX
- TLSH T1F406F423DFB58414E0729F35C8236AA019323D5987685A4F1AA4B63F4EF37426E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory