General
- Target 2026-09-24_76668ab63faef6496fd93dcd714d77b0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- Sample260925-hsstcasclh
- SHA256 a8aeecdaf395390a7c190500b64b400f7516156c3305553f647083265a2375cb
- MD5 76668ab63faef6496fd93dcd714d77b0
- SHA1 2bad0014f9db4e4e517a90727831be7f70bac792
- SHA512 bf7cea581b33db332f7ac8dd4f3b87dc622d20f4d61b3202c8977f5d3e7a16bd60abd98a4dbdffab3bf5d48225881035d2b032ef59b97d73de87308d11994266
- SSDEEP 24576:3xWVeyRYvl1rGFx1rGFr4O8b8ITDnl1bF4dxfC:38YN+C4O8b8ITDnl9FUC
- TLSH T1D5B5D753B640CEA3C58E16305817865A1F726C472F826BC73389BB5E7EB33D4BE0525A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_76668ab63faef6496fd93dcd714d77b0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_76668ab63faef6496fd93dcd714d77b0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_76668ab63faef6496fd93dcd714d77b0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.2MB
- SHA256 a8aeecdaf395390a7c190500b64b400f7516156c3305553f647083265a2375cb
- MD5 76668ab63faef6496fd93dcd714d77b0
- SHA1 2bad0014f9db4e4e517a90727831be7f70bac792
- SHA512 bf7cea581b33db332f7ac8dd4f3b87dc622d20f4d61b3202c8977f5d3e7a16bd60abd98a4dbdffab3bf5d48225881035d2b032ef59b97d73de87308d11994266
- SSDEEP 24576:3xWVeyRYvl1rGFx1rGFr4O8b8ITDnl1bF4dxfC:38YN+C4O8b8ITDnl9FUC
- TLSH T1D5B5D753B640CEA3C58E16305817865A1F726C472F826BC73389BB5E7EB33D4BE0525A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory