General
- Target 2026-09-21_555ca9e178cea061a218905d0bfd36d3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 918KB
- Sample260922-qeadvafa92
- SHA256 813eff4a83f269767f3315b91f3974774e11e4033a8b742b597756fb3ef9f3d3
- MD5 555ca9e178cea061a218905d0bfd36d3
- SHA1 b0685456870c288ac09d7e0f34988ce2d71354c8
- SHA512 48f69f29a2c005db0125d83b7f5696f9de7d01418c5d4b3aff8fd30d51f96da28e8b2efaa231381abc3e9d19ebfd155c6eb53e6e0d468d366363821423378064
- SSDEEP 12288:nwKfOVRo9yRY4N797f4O8b8ITDnlY2rnNaSPNaSNI+VwXXAX2feEg:nxWVeyRY4N797f4O8b8ITDnlYxQyeEg
- TLSH T1EE154A39A994CF22D36FB13094AA9F7136136C595FE097CF62583F4A7B742A1CC26123
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_555ca9e178cea061a218905d0bfd36d3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-21_555ca9e178cea061a218905d0bfd36d3_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_555ca9e178cea061a218905d0bfd36d3_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 918KB
- SHA256 813eff4a83f269767f3315b91f3974774e11e4033a8b742b597756fb3ef9f3d3
- MD5 555ca9e178cea061a218905d0bfd36d3
- SHA1 b0685456870c288ac09d7e0f34988ce2d71354c8
- SHA512 48f69f29a2c005db0125d83b7f5696f9de7d01418c5d4b3aff8fd30d51f96da28e8b2efaa231381abc3e9d19ebfd155c6eb53e6e0d468d366363821423378064
- SSDEEP 12288:nwKfOVRo9yRY4N797f4O8b8ITDnlY2rnNaSPNaSNI+VwXXAX2feEg:nxWVeyRY4N797f4O8b8ITDnlYxQyeEg
- TLSH T1EE154A39A994CF22D36FB13094AA9F7136136C595FE097CF62583F4A7B742A1CC26123
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory