General
- Target 2026-09-05_76d3550c9dbf83ed9977ab47feea3113_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- Sample260907-vhr6aa1fkd
- SHA256 70db449281b490300646f2defcff1e6f110b5969083d6327199455359bfd1cd1
- MD5 76d3550c9dbf83ed9977ab47feea3113
- SHA1 ca76a8adc41fbf7a5870c39193ef70f1a7646b24
- SHA512 9a8915b6023e1025a7ad5882cb3764d1479cfb57377260e6d92527cfc84b0e0ad54062572ec51e673af02e7cdfd12b7bc442971b6df979624d0cf5bd2be7e923
- SSDEEP 24576:gxWVeyRY+y4O8b8ITDnl6F+mXjmXlrkrOxUzV:g8YR4O8b8ITDnl6F+oyICxC
- TLSH T19C654C62B2D8D025F4B63B308D7B8EA02A26BC155FB5864F3684371E2F736A1DD21717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_76d3550c9dbf83ed9977ab47feea3113_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_76d3550c9dbf83ed9977ab47feea3113_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_76d3550c9dbf83ed9977ab47feea3113_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.4MB
- SHA256 70db449281b490300646f2defcff1e6f110b5969083d6327199455359bfd1cd1
- MD5 76d3550c9dbf83ed9977ab47feea3113
- SHA1 ca76a8adc41fbf7a5870c39193ef70f1a7646b24
- SHA512 9a8915b6023e1025a7ad5882cb3764d1479cfb57377260e6d92527cfc84b0e0ad54062572ec51e673af02e7cdfd12b7bc442971b6df979624d0cf5bd2be7e923
- SSDEEP 24576:gxWVeyRY+y4O8b8ITDnl6F+mXjmXlrkrOxUzV:g8YR4O8b8ITDnl6F+oyICxC
- TLSH T19C654C62B2D8D025F4B63B308D7B8EA02A26BC155FB5864F3684371E2F736A1DD21717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory