General
- Target 2026-09-30_595976d203caab6526b4390d761a056e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- Sample260930-nctctssfle
- SHA256 742592f08b68a836d8312294b5bfc063a53762d4d663104a9f08b1f52b6ba1bf
- MD5 595976d203caab6526b4390d761a056e
- SHA1 7a62ab53840d178815688a43abeb49025647edd4
- SHA512 8885d917aa837e8830fc49cce6d6121d7bf6071376b5a5b6c7b63c3f83acfcc435e0fef917ff334b1a39e314b0a13c09a9736550bad1cc647c1e14114befeaa2
- SSDEEP 24576:/xWVeyRYCGZ4O8b8ITDnljFV7VWpCnmhI7egj:/8YP4O8b8ITDnljFV7VWpCnmhI7egj
- TLSH T18806F7CDA365CD07DC69DE3C44B24D501E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_595976d203caab6526b4390d761a056e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_595976d203caab6526b4390d761a056e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_595976d203caab6526b4390d761a056e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.6MB
- SHA256 742592f08b68a836d8312294b5bfc063a53762d4d663104a9f08b1f52b6ba1bf
- MD5 595976d203caab6526b4390d761a056e
- SHA1 7a62ab53840d178815688a43abeb49025647edd4
- SHA512 8885d917aa837e8830fc49cce6d6121d7bf6071376b5a5b6c7b63c3f83acfcc435e0fef917ff334b1a39e314b0a13c09a9736550bad1cc647c1e14114befeaa2
- SSDEEP 24576:/xWVeyRYCGZ4O8b8ITDnljFV7VWpCnmhI7egj:/8YP4O8b8ITDnljFV7VWpCnmhI7egj
- TLSH T18806F7CDA365CD07DC69DE3C44B24D501E5EAC22486A03DA21AFF3DB5EBB25C4816E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory