General
- Target 2026-09-24_3d400d6d274c28b04c29eb342b2922c1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260924-ejgsyaz17p
- SHA256 92aa1e2379e55bb4faf994ab314595363ac2e607e688c0da11c417adcee9a21a
- MD5 3d400d6d274c28b04c29eb342b2922c1
- SHA1 feb06a0640d4e5b049fdd32c5d9009743f524fad
- SHA512 9bd4f6179ae58c971075d6a404fc5269e3da88e8f1a5691fe98aa1014887b3ca0c052f909de1e615053d189ab781afb8f22893ff9dca4b1d50938f601d6e1b5b
- SSDEEP 12288:lwKfOVRo9yRYfTi0Lmt4O8b8ITDnlE8FF0y+X+uqom/EqSD:lxWVeyRYe0Lmt4O8b8ITDnlrFB4fqqD
- TLSH T190A59421B2E4C415F2E626309C358AA42926BC119DF88A8B374BFF8F7FF2564DD15316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_3d400d6d274c28b04c29eb342b2922c1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_3d400d6d274c28b04c29eb342b2922c1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_3d400d6d274c28b04c29eb342b2922c1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 92aa1e2379e55bb4faf994ab314595363ac2e607e688c0da11c417adcee9a21a
- MD5 3d400d6d274c28b04c29eb342b2922c1
- SHA1 feb06a0640d4e5b049fdd32c5d9009743f524fad
- SHA512 9bd4f6179ae58c971075d6a404fc5269e3da88e8f1a5691fe98aa1014887b3ca0c052f909de1e615053d189ab781afb8f22893ff9dca4b1d50938f601d6e1b5b
- SSDEEP 12288:lwKfOVRo9yRYfTi0Lmt4O8b8ITDnlE8FF0y+X+uqom/EqSD:lxWVeyRYe0Lmt4O8b8ITDnlrFB4fqqD
- TLSH T190A59421B2E4C415F2E626309C358AA42926BC119DF88A8B374BFF8F7FF2564DD15316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory