General
- Target 2026-09-30_60195f3233b341dda0c0a4f76f5da429_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260930-m5tzdsde69
- SHA256 fddccf4c24221cc25cb566c9d980d99da7980b368d06d401dbaf4a24908bfa11
- MD5 60195f3233b341dda0c0a4f76f5da429
- SHA1 d964455e3528bb8484dea7aa2430679aa02042a8
- SHA512 53c92d1df8ed66b34987cbd0f9390d07c6465339f4abbe9bbd5693b6ce55cb6040e6defd2ec0cb8837f55fe1c6dba1db81cf69e5c79678aac799235809a1c8f3
- SSDEEP 12288:uwKfOVRo9yRYDA14O8b8ITDnld0NiVoo5j002c8:uxWVeyRYDq4O8b8ITDnl4IY0z8
- TLSH T1C555B522A3FDD124F2FB2B3489754BA11A67BD52AE78C66F2254370D1E706B0CD24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_60195f3233b341dda0c0a4f76f5da429_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_60195f3233b341dda0c0a4f76f5da429_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_60195f3233b341dda0c0a4f76f5da429_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 fddccf4c24221cc25cb566c9d980d99da7980b368d06d401dbaf4a24908bfa11
- MD5 60195f3233b341dda0c0a4f76f5da429
- SHA1 d964455e3528bb8484dea7aa2430679aa02042a8
- SHA512 53c92d1df8ed66b34987cbd0f9390d07c6465339f4abbe9bbd5693b6ce55cb6040e6defd2ec0cb8837f55fe1c6dba1db81cf69e5c79678aac799235809a1c8f3
- SSDEEP 12288:uwKfOVRo9yRYDA14O8b8ITDnld0NiVoo5j002c8:uxWVeyRYDq4O8b8ITDnl4IY0z8
- TLSH T1C555B522A3FDD124F2FB2B3489754BA11A67BD52AE78C66F2254370D1E706B0CD24727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory