General
- Target 2026-09-24_11ce12ecb9663afbda35c9a032077cdd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 866KB
- Sample260924-e15w4aea25
- SHA256 8921b81dde023d1ba9aa379585af5ed50a467097d85b83e5573a4e181a118463
- MD5 11ce12ecb9663afbda35c9a032077cdd
- SHA1 4ba425ad626381c89957b18f91f9de53a5505052
- SHA512 8dabee031dc435b45e18d9247e46b70bf05d341e945917f9afa278801b7285d991dd3a052b715be74f4ebfb5c2f06f3ec396dea2592e563cfcf7f60a343cdf68
- SSDEEP 12288:KwKfOVRo9yRYnN797f4O8b8ITDnlKKr0NaSPNaSAfKwXXAX2iY:KxWVeyRYnN797f4O8b8ITDnlKsQPY
- TLSH T112155A39AA94CF32D36FB17085A2AE6036276C595FE087CF62543F4A7B752B1CC66103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_11ce12ecb9663afbda35c9a032077cdd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_11ce12ecb9663afbda35c9a032077cdd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_11ce12ecb9663afbda35c9a032077cdd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 866KB
- SHA256 8921b81dde023d1ba9aa379585af5ed50a467097d85b83e5573a4e181a118463
- MD5 11ce12ecb9663afbda35c9a032077cdd
- SHA1 4ba425ad626381c89957b18f91f9de53a5505052
- SHA512 8dabee031dc435b45e18d9247e46b70bf05d341e945917f9afa278801b7285d991dd3a052b715be74f4ebfb5c2f06f3ec396dea2592e563cfcf7f60a343cdf68
- SSDEEP 12288:KwKfOVRo9yRYnN797f4O8b8ITDnlKKr0NaSPNaSAfKwXXAX2iY:KxWVeyRYnN797f4O8b8ITDnlKsQPY
- TLSH T112155A39AA94CF32D36FB17085A2AE6036276C595FE087CF62543F4A7B752B1CC66103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory