General
- Target 2026-09-05_638299b973897015c9f9e817a8f476dd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260907-yrdk2abb22
- SHA256 a9a0cdd17f6a45d55307f50d689f5e61f4a6b3c679f4f1320e1f2309d940d9ba
- MD5 638299b973897015c9f9e817a8f476dd
- SHA1 54901f955cedd154dc89d280583a7fccbf922bd1
- SHA512 2dcd564133a81ebd3b16c6edda81bf6e1af85699dd8073ee4e5ea4b3abc7169b71f8b7a8f248ad0af93c9553f6f7703df506847c5ead3da176944919e87a1b4a
- SSDEEP 24576:FxWVeyRYPMM2wzYDteYIpLPLmQ4O8b8ITDnlzSplZY0/8IqJ/:F8Yk8b4O8b8ITDnlWp3HqJ/
- TLSH T1A285705063E0CE15F2FFAE3048766E21192ABC625DB583DE1215BB4E3DB1750EE2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_638299b973897015c9f9e817a8f476dd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_638299b973897015c9f9e817a8f476dd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_638299b973897015c9f9e817a8f476dd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 a9a0cdd17f6a45d55307f50d689f5e61f4a6b3c679f4f1320e1f2309d940d9ba
- MD5 638299b973897015c9f9e817a8f476dd
- SHA1 54901f955cedd154dc89d280583a7fccbf922bd1
- SHA512 2dcd564133a81ebd3b16c6edda81bf6e1af85699dd8073ee4e5ea4b3abc7169b71f8b7a8f248ad0af93c9553f6f7703df506847c5ead3da176944919e87a1b4a
- SSDEEP 24576:FxWVeyRYPMM2wzYDteYIpLPLmQ4O8b8ITDnlzSplZY0/8IqJ/:F8Yk8b4O8b8ITDnlWp3HqJ/
- TLSH T1A285705063E0CE15F2FFAE3048766E21192ABC625DB583DE1215BB4E3DB1750EE2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory