General
- Target 2026-09-12_48af9c30636000690301d1e52f216b0d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 998KB
- Sample260913-cwlxbazflb
- SHA256 0453a6db00f590b31c79509e09dd0434c658f66d2b3af7862801205f97307926
- MD5 48af9c30636000690301d1e52f216b0d
- SHA1 6d4eda7aa9d6dbbb5f5420f88546508d4e7eaf88
- SHA512 30e3adaaafe3419c17a7ff5d4bbe9a11afcf3b0384eea47bb2b6a311acdbace48966474c2b5f8a36ef07d894e25be51152b26fdaade802f586caf7133c505062
- SSDEEP 6144:0wynAtMrOVRkidy9yIGWlUi8vbB4O8b8ITDnlznZJQJUE3ArnyV7Elax/FscYrdb:0wKfOVRo9yRY0B4O8b8ITDnlL0wGVB0T
- TLSH T1B0250871B3E5C025E5B23B308D768EA02A26BC116EB5C64F3648375E6F316B1DD21B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_48af9c30636000690301d1e52f216b0d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_48af9c30636000690301d1e52f216b0d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_48af9c30636000690301d1e52f216b0d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 998KB
- SHA256 0453a6db00f590b31c79509e09dd0434c658f66d2b3af7862801205f97307926
- MD5 48af9c30636000690301d1e52f216b0d
- SHA1 6d4eda7aa9d6dbbb5f5420f88546508d4e7eaf88
- SHA512 30e3adaaafe3419c17a7ff5d4bbe9a11afcf3b0384eea47bb2b6a311acdbace48966474c2b5f8a36ef07d894e25be51152b26fdaade802f586caf7133c505062
- SSDEEP 6144:0wynAtMrOVRkidy9yIGWlUi8vbB4O8b8ITDnlznZJQJUE3ArnyV7Elax/FscYrdb:0wKfOVRo9yRY0B4O8b8ITDnlL0wGVB0T
- TLSH T1B0250871B3E5C025E5B23B308D768EA02A26BC116EB5C64F3648375E6F316B1DD21B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory