General
- Target 2026-09-24_4518dc7c33d4e0a792d29c09e11511ef_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 865KB
- Sample260924-eem46add79
- SHA256 d97fb1740a255035ba8cae9acd7350a8db07ccfaa512dfee611e1861c33d6aaa
- MD5 4518dc7c33d4e0a792d29c09e11511ef
- SHA1 4d4da0d37086dbdf4578ed75f2dedcaee5829a55
- SHA512 49aa28c5e1b86797632a6f430b88b10f9cc9a8ac4f432e295e1df7044ad66d2566201d94d7b88747b3ff6fcec90bbdca4871efeecd80158aee6d0f388ab7c521
- SSDEEP 12288:KwKfOVRo9yRYac797f4O8b8ITDnlKKr0NaSPNaSAfKwXXAX2is:KxWVeyRYac797f4O8b8ITDnlKsQPs
- TLSH T10B155A39AA94CF22D36FB17085A2AE6036276C595FE087CF72543F4A7B752B1CC66103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_4518dc7c33d4e0a792d29c09e11511ef_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_4518dc7c33d4e0a792d29c09e11511ef_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_4518dc7c33d4e0a792d29c09e11511ef_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 865KB
- SHA256 d97fb1740a255035ba8cae9acd7350a8db07ccfaa512dfee611e1861c33d6aaa
- MD5 4518dc7c33d4e0a792d29c09e11511ef
- SHA1 4d4da0d37086dbdf4578ed75f2dedcaee5829a55
- SHA512 49aa28c5e1b86797632a6f430b88b10f9cc9a8ac4f432e295e1df7044ad66d2566201d94d7b88747b3ff6fcec90bbdca4871efeecd80158aee6d0f388ab7c521
- SSDEEP 12288:KwKfOVRo9yRYac797f4O8b8ITDnlKKr0NaSPNaSAfKwXXAX2is:KxWVeyRYac797f4O8b8ITDnlKsQPs
- TLSH T10B155A39AA94CF22D36FB17085A2AE6036276C595FE087CF72543F4A7B752B1CC66103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory