General
- Target 2026-09-13_f5f370f9e459c7fd30894af35fe5b75b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 999KB
- Sample260913-j9mt4aem5t
- SHA256 818490e25b74510a14c5a717248ac3803d55da58c1569fd66135b1af3c0596e3
- MD5 f5f370f9e459c7fd30894af35fe5b75b
- SHA1 85b575ba34b57c2c3aab6cbe1d82067584e8443c
- SHA512 3e6f59bb9e4c5b23f3fca783be46f9d3aefbbc8b2dbf4233d4822dab476330505c2e75785e5fc6e7b5a2d5f3164e30e134132347abec724048f0051e23b4f9d7
- SSDEEP 12288:swKfOVRo9yRYaB4O8b8ITDnlL0iEQxV/8d:sxWVeyRYaB4O8b8ITDnll8
- TLSH T1ED250771B3E5C025E5B23B308D768EA03A26BC216EB5C64F3648375E6F316A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_f5f370f9e459c7fd30894af35fe5b75b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_f5f370f9e459c7fd30894af35fe5b75b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_f5f370f9e459c7fd30894af35fe5b75b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 999KB
- SHA256 818490e25b74510a14c5a717248ac3803d55da58c1569fd66135b1af3c0596e3
- MD5 f5f370f9e459c7fd30894af35fe5b75b
- SHA1 85b575ba34b57c2c3aab6cbe1d82067584e8443c
- SHA512 3e6f59bb9e4c5b23f3fca783be46f9d3aefbbc8b2dbf4233d4822dab476330505c2e75785e5fc6e7b5a2d5f3164e30e134132347abec724048f0051e23b4f9d7
- SSDEEP 12288:swKfOVRo9yRYaB4O8b8ITDnlL0iEQxV/8d:sxWVeyRYaB4O8b8ITDnll8
- TLSH T1ED250771B3E5C025E5B23B308D768EA03A26BC216EB5C64F3648375E6F316A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory