General
- Target 2026-09-19_dfd85974016ed6d877c4a8298e965908_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260919-t71chstbre
- SHA256 efb151c37f02b98d8398c59fd5a6bcf9945c587b6f3516fd26b3cbfb6b30354b
- MD5 dfd85974016ed6d877c4a8298e965908
- SHA1 255532c95b64f130e078e84ef24283fb856ecd3e
- SHA512 4a606d87208df75537ec30949db71b1a1f09b4da8a523e5bd2c189a22557b4660fe6ad6c1bc2cbaec0774156d078c0c4d1d1f18dd1907e36eb61da9ebbc6cc6c
- SSDEEP 12288:kwKfOVRo9yRYXb4O8b8ITDnljFF0wfycXEHk0XMMReKyYq6:kxWVeyRYXb4O8b8ITDnljF3XoklMRb
- TLSH T1F5453A31B2E4C126E4B67B304D778EA02A36BC116EB5C24B37547B5E6F716E0DE21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_dfd85974016ed6d877c4a8298e965908_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_dfd85974016ed6d877c4a8298e965908_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_dfd85974016ed6d877c4a8298e965908_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 efb151c37f02b98d8398c59fd5a6bcf9945c587b6f3516fd26b3cbfb6b30354b
- MD5 dfd85974016ed6d877c4a8298e965908
- SHA1 255532c95b64f130e078e84ef24283fb856ecd3e
- SHA512 4a606d87208df75537ec30949db71b1a1f09b4da8a523e5bd2c189a22557b4660fe6ad6c1bc2cbaec0774156d078c0c4d1d1f18dd1907e36eb61da9ebbc6cc6c
- SSDEEP 12288:kwKfOVRo9yRYXb4O8b8ITDnljFF0wfycXEHk0XMMReKyYq6:kxWVeyRYXb4O8b8ITDnljF3XoklMRb
- TLSH T1F5453A31B2E4C126E4B67B304D778EA02A36BC116EB5C24B37547B5E6F716E0DE21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory