General
- Target 2026-08-11_92a851bc1fdbdf3cdd049396db43f78b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 916KB
- Sample260811-hlde3stydv
- SHA256 4d488e176b502849a2c1bcab952de4fa5d76bd50faa5f391af177be5a933b01b
- MD5 92a851bc1fdbdf3cdd049396db43f78b
- SHA1 4d9ff7218652a7accdf4c6fb14f31f3a712cfdfd
- SHA512 5e6feaecd92edc696cd76c20808a14cb0c8a6b97c9b542d6b70603ae14a143b737f3589b597a976ba10c5a97d66a3b37a906efc95489743013b42b6dc38b23f1
- SSDEEP 12288:XwKfOVRo9yRYZWb4O8b8ITDnlV0orsRZe0Lch:XxWVeyRYZWb4O8b8ITDnlbLh
- TLSH T11715C72172C8AABED46BAE38596559A2EA337CD15EE847CB3140BF0D7A313B1CC14717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_92a851bc1fdbdf3cdd049396db43f78b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_92a851bc1fdbdf3cdd049396db43f78b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_92a851bc1fdbdf3cdd049396db43f78b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 916KB
- SHA256 4d488e176b502849a2c1bcab952de4fa5d76bd50faa5f391af177be5a933b01b
- MD5 92a851bc1fdbdf3cdd049396db43f78b
- SHA1 4d9ff7218652a7accdf4c6fb14f31f3a712cfdfd
- SHA512 5e6feaecd92edc696cd76c20808a14cb0c8a6b97c9b542d6b70603ae14a143b737f3589b597a976ba10c5a97d66a3b37a906efc95489743013b42b6dc38b23f1
- SSDEEP 12288:XwKfOVRo9yRYZWb4O8b8ITDnlV0orsRZe0Lch:XxWVeyRYZWb4O8b8ITDnlbLh
- TLSH T11715C72172C8AABED46BAE38596559A2EA337CD15EE847CB3140BF0D7A313B1CC14717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory