General
- Target 2026-09-04_6a5f434b262145fbadd0af91772ce15c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260905-j1dvtsgr9t
- SHA256 48ad1db64ece4c9cfa728253fd92a917827ae4fd5a7e861cbf0142d7d2b593ca
- MD5 6a5f434b262145fbadd0af91772ce15c
- SHA1 61254f4750e4a37a0666885d5dc4cd593d6a94fb
- SHA512 9c8d4c3aa12f48a188d6dc06e27700debccc345fbac5d815c054e1b17db60bd113d1268ce8e61bc91a4b82cee8ebde1c90ff413c0af17ab5593dec9935a2b09f
- SSDEEP 24576:uxWVeyRYvzPky4O8b8ITDnljFvmXjmXrrkrdxISZ:u8Yzn4O8b8ITDnljFvo4IBxx
- TLSH T1DE553C62B2D9C025F4B63B308D7A8EA02B26BC155FB5864F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6a5f434b262145fbadd0af91772ce15c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6a5f434b262145fbadd0af91772ce15c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6a5f434b262145fbadd0af91772ce15c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 48ad1db64ece4c9cfa728253fd92a917827ae4fd5a7e861cbf0142d7d2b593ca
- MD5 6a5f434b262145fbadd0af91772ce15c
- SHA1 61254f4750e4a37a0666885d5dc4cd593d6a94fb
- SHA512 9c8d4c3aa12f48a188d6dc06e27700debccc345fbac5d815c054e1b17db60bd113d1268ce8e61bc91a4b82cee8ebde1c90ff413c0af17ab5593dec9935a2b09f
- SSDEEP 24576:uxWVeyRYvzPky4O8b8ITDnljFvmXjmXrrkrdxISZ:u8Yzn4O8b8ITDnljFvo4IBxx
- TLSH T1DE553C62B2D9C025F4B63B308D7A8EA02B26BC155FB5864F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory