General
- Target 2026-09-24_6af7f215bae20da062e3e094d7011c56_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample260925-jpf6tacb24
- SHA256 23547664ff0e820d0fd17de025f156aee48b4bff4244a042e36188b8a70fb158
- MD5 6af7f215bae20da062e3e094d7011c56
- SHA1 24050b6257ab6f27f8116c57238fcb22bf36bcd5
- SHA512 41fb0a1aabafaf29e060ab0531b5d38455c60f71edac470e0153ba71525ea6e9e4c478d8f48c525912c270fc31a83ef8e95fd9a05289050fb6a5d8fdb8183d74
- SSDEEP 12288:xwKfOVRo9yRYc41z4O8b8ITDnljFF08pVEqn:xxWVeyRYcQz4O8b8ITDnljFjpz
- TLSH T1CF35E821B2D48426F5B62B308C778EA02E22BC565EF1825F3658B71D6F713A1FD2171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_6af7f215bae20da062e3e094d7011c56_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_6af7f215bae20da062e3e094d7011c56_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_6af7f215bae20da062e3e094d7011c56_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 23547664ff0e820d0fd17de025f156aee48b4bff4244a042e36188b8a70fb158
- MD5 6af7f215bae20da062e3e094d7011c56
- SHA1 24050b6257ab6f27f8116c57238fcb22bf36bcd5
- SHA512 41fb0a1aabafaf29e060ab0531b5d38455c60f71edac470e0153ba71525ea6e9e4c478d8f48c525912c270fc31a83ef8e95fd9a05289050fb6a5d8fdb8183d74
- SSDEEP 12288:xwKfOVRo9yRYc41z4O8b8ITDnljFF08pVEqn:xxWVeyRYcQz4O8b8ITDnljFjpz
- TLSH T1CF35E821B2D48426F5B62B308C778EA02E22BC565EF1825F3658B71D6F713A1FD2171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory