General
- Target 2026-09-25_a81a8e78c4ed35256156eafdc9516d6b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample260925-1hm48azyev
- SHA256 f4f9add57ac41c99f9f89852d857168bc2f06173cf34da8a2e94a14350e91074
- MD5 a81a8e78c4ed35256156eafdc9516d6b
- SHA1 e2f25dfdc98fcd5728560144ae1ded116ea10ca8
- SHA512 a5b0135ad6125223773d42d7b7a77555b0cae344e3ca1398bc9af6d64911228b13688c8c0c192d49904214d8b48ad6c26a288980567169f47f7ddc08f03e7ff1
- SSDEEP 12288:7wKfOVRo9yRYRmrLmZ4O8b8ITDnljFF068SEqk:7xWVeyRYgrLmZ4O8b8ITDnljFM
- TLSH T12335FA23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_a81a8e78c4ed35256156eafdc9516d6b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_a81a8e78c4ed35256156eafdc9516d6b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_a81a8e78c4ed35256156eafdc9516d6b_coinminer_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 f4f9add57ac41c99f9f89852d857168bc2f06173cf34da8a2e94a14350e91074
- MD5 a81a8e78c4ed35256156eafdc9516d6b
- SHA1 e2f25dfdc98fcd5728560144ae1ded116ea10ca8
- SHA512 a5b0135ad6125223773d42d7b7a77555b0cae344e3ca1398bc9af6d64911228b13688c8c0c192d49904214d8b48ad6c26a288980567169f47f7ddc08f03e7ff1
- SSDEEP 12288:7wKfOVRo9yRYRmrLmZ4O8b8ITDnljFF068SEqk:7xWVeyRYgrLmZ4O8b8ITDnljFM
- TLSH T12335FA23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory