General
- Target 2026-09-25_97931fc944443cb9321724e85829026d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260925-2fdcnsaa55
- SHA256 2fff15870492cd7eaa8db7afb91e22d6554a12f39f70dc8a854a1a317eaa2e73
- MD5 97931fc944443cb9321724e85829026d
- SHA1 228a05cba8d09ee777d5aebc643e81cb080047c5
- SHA512 812665cb054d00e6b674ba5822d7e682209fda7ed92b79260fac9b5838627a6b1cba7fe1b6b43b0a0bac584ba132fd6dc255a10d9d326191aa5528b51f71e5e8
- SSDEEP 12288:/wKfOVRo9yRYyRSv4O8b8ITDnleYLjfBfNCink:/xWVeyRYyM4O8b8ITDnlek5FDnk
- TLSH T1E0A5C5F27E90FA65D0CA6C35390AA9BCE9537C759D5383C33283FB2D6636261D91A007
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_97931fc944443cb9321724e85829026d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_97931fc944443cb9321724e85829026d_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_97931fc944443cb9321724e85829026d_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 2fff15870492cd7eaa8db7afb91e22d6554a12f39f70dc8a854a1a317eaa2e73
- MD5 97931fc944443cb9321724e85829026d
- SHA1 228a05cba8d09ee777d5aebc643e81cb080047c5
- SHA512 812665cb054d00e6b674ba5822d7e682209fda7ed92b79260fac9b5838627a6b1cba7fe1b6b43b0a0bac584ba132fd6dc255a10d9d326191aa5528b51f71e5e8
- SSDEEP 12288:/wKfOVRo9yRYyRSv4O8b8ITDnleYLjfBfNCink:/xWVeyRYyM4O8b8ITDnlek5FDnk
- TLSH T1E0A5C5F27E90FA65D0CA6C35390AA9BCE9537C759D5383C33283FB2D6636261D91A007
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory