General
- Target 2026-09-24_80d52290776b81ef05444d3fd9431d0f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample260925-gychwabc38
- SHA256 0e6ba457c34a7e3d3fd8c26d11631c2db9263e223be10012c1693e402b5114d2
- MD5 80d52290776b81ef05444d3fd9431d0f
- SHA1 d2aab53c88f78c959341a9c9ee2cc24eaf0fd993
- SHA512 1f400509577633c7eb334bf9b17e03efa17c18b9a5581811b00a79e39c5a47503bd32c28dc5056b654e3cff621dbdb18343351b04fc62dd9725be53a4ef14985
- SSDEEP 12288:SwKfOVRo9yRYs4VEV+YrLaLAmr4O8b8ITDnl1lnYGsahxqMzNUM:SxWVeyRYnO1rGFr4O8b8ITDnl1OFQxfF
- TLSH T12385E862B640CE63D68F253058178A552F726C066FC26BC73386FF5E7EB3394AD0521A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_80d52290776b81ef05444d3fd9431d0f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_80d52290776b81ef05444d3fd9431d0f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_80d52290776b81ef05444d3fd9431d0f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 0e6ba457c34a7e3d3fd8c26d11631c2db9263e223be10012c1693e402b5114d2
- MD5 80d52290776b81ef05444d3fd9431d0f
- SHA1 d2aab53c88f78c959341a9c9ee2cc24eaf0fd993
- SHA512 1f400509577633c7eb334bf9b17e03efa17c18b9a5581811b00a79e39c5a47503bd32c28dc5056b654e3cff621dbdb18343351b04fc62dd9725be53a4ef14985
- SSDEEP 12288:SwKfOVRo9yRYs4VEV+YrLaLAmr4O8b8ITDnl1lnYGsahxqMzNUM:SxWVeyRYnO1rGFr4O8b8ITDnl1OFQxfF
- TLSH T12385E862B640CE63D68F253058178A552F726C066FC26BC73386FF5E7EB3394AD0521A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory