General
- Target 2026-09-13_d6c461acce6885fa39b28a0431a20abf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample260913-lrzgaaaa43
- SHA256 34ff73ae766f61e3e650c3e154809add7d5dd56ce0aca80cc6db44b14676b770
- MD5 d6c461acce6885fa39b28a0431a20abf
- SHA1 229124d9275f86d0c3d1d346f7f12c531fcef7fd
- SHA512 cea40c32794e5c5f45a12785d7b026a63530ee7f83e132c896ad87291de660e9a99d48301b6d1983e00761ffeb3eed08554f9799a1cade9f8cf3e5cf417c6851
- SSDEEP 24576:WxWVeyRYz2y4O8b8ITDnljFvmXjmXrrkrdxISf:W8YF4O8b8ITDnljFvo4IBxX
- TLSH T19E653C62B2D8C025F4B63B348D7A8EA02B26BC155FB5864F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_d6c461acce6885fa39b28a0431a20abf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_d6c461acce6885fa39b28a0431a20abf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_d6c461acce6885fa39b28a0431a20abf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 34ff73ae766f61e3e650c3e154809add7d5dd56ce0aca80cc6db44b14676b770
- MD5 d6c461acce6885fa39b28a0431a20abf
- SHA1 229124d9275f86d0c3d1d346f7f12c531fcef7fd
- SHA512 cea40c32794e5c5f45a12785d7b026a63530ee7f83e132c896ad87291de660e9a99d48301b6d1983e00761ffeb3eed08554f9799a1cade9f8cf3e5cf417c6851
- SSDEEP 24576:WxWVeyRYz2y4O8b8ITDnljFvmXjmXrrkrdxISf:W8YF4O8b8ITDnljFvo4IBxX
- TLSH T19E653C62B2D8C025F4B63B348D7A8EA02B26BC155FB5864F3644371E2F736A1DD21727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory