General
- Target 2026-09-23_481fed26f444693562674a4dd00de800_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260924-lln4csaf32
- SHA256 062590434f15c3eea90d3828179abaf91eb2fb898f8e1209d068b62dcd0627d9
- MD5 481fed26f444693562674a4dd00de800
- SHA1 dc7bf6317145f0a26433d1bf13ec14d4695e8f17
- SHA512 8d1960900a1d36e029908dd6e1c24637f0b940e118be1617ab69131bcd278f9866bdb04b910ec0bf31cae29c7f239c85eec81c7d39c714472f069c77fe7596c6
- SSDEEP 24576:pxWVeyRY4w44RE5E/jYKDB8U4jYY0td7kt+X83BaLmA4O8b8ITDnl1FRoefqE5k:p8Y4w44RH4O8b8ITDnl1F+efqEi
- TLSH T1A1B5D521BEECD415F2E22A3098354AA069157C11BDF8868B378AFB5EFEF2750DD11316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_481fed26f444693562674a4dd00de800_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-23_481fed26f444693562674a4dd00de800_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_481fed26f444693562674a4dd00de800_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 062590434f15c3eea90d3828179abaf91eb2fb898f8e1209d068b62dcd0627d9
- MD5 481fed26f444693562674a4dd00de800
- SHA1 dc7bf6317145f0a26433d1bf13ec14d4695e8f17
- SHA512 8d1960900a1d36e029908dd6e1c24637f0b940e118be1617ab69131bcd278f9866bdb04b910ec0bf31cae29c7f239c85eec81c7d39c714472f069c77fe7596c6
- SSDEEP 24576:pxWVeyRY4w44RE5E/jYKDB8U4jYY0td7kt+X83BaLmA4O8b8ITDnl1FRoefqE5k:p8Y4w44RH4O8b8ITDnl1F+efqEi
- TLSH T1A1B5D521BEECD415F2E22A3098354AA069157C11BDF8868B378AFB5EFEF2750DD11316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory