General
- Target 2026-07-31_39640936cbf9faecfa195498279cab0e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 919KB
- Sample260731-xblq2ayfjf
- SHA256 787f2028cf852317845c0d1e7c941e1935403f6cbc9b358865d1d6615516fdf3
- MD5 39640936cbf9faecfa195498279cab0e
- SHA1 da669c152f91d4dea8d02f7147acfedb9b39ab22
- SHA512 653778fad09571253bbd333a8e95890d37320dd5057697e0c67ba9286bd724732b2d6836a080fb91a662155884b9191f66ce0fe7abe021a67140fded2627ed5e
- SSDEEP 6144:nwynAtMrOVRkidy9yIGWlUiXTxJvl4O8b8ITDnlznZTGeHYwNfgOLlwlvSkN:nwKfOVRo9yRYBR4O8b8ITDnll5yvSkN
- TLSH T1AD15C721A3E94115F5F33F309BB54AE0EB3B7C65AAB5C50E2240370E5A75BA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_39640936cbf9faecfa195498279cab0e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_39640936cbf9faecfa195498279cab0e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_39640936cbf9faecfa195498279cab0e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 919KB
- SHA256 787f2028cf852317845c0d1e7c941e1935403f6cbc9b358865d1d6615516fdf3
- MD5 39640936cbf9faecfa195498279cab0e
- SHA1 da669c152f91d4dea8d02f7147acfedb9b39ab22
- SHA512 653778fad09571253bbd333a8e95890d37320dd5057697e0c67ba9286bd724732b2d6836a080fb91a662155884b9191f66ce0fe7abe021a67140fded2627ed5e
- SSDEEP 6144:nwynAtMrOVRkidy9yIGWlUiXTxJvl4O8b8ITDnlznZTGeHYwNfgOLlwlvSkN:nwKfOVRo9yRYBR4O8b8ITDnll5yvSkN
- TLSH T1AD15C721A3E94115F5F33F309BB54AE0EB3B7C65AAB5C50E2240370E5A75BA0DD26723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory