General
- Target 2026-10-08_05fbd8435ed5e28900adcbaf2fe5d0e1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- Sample261009-1vmdfsfs4s
- SHA256 82a67c19eaf02088d501c32c5641fdc109cf90c00319c820cd0563a7767a83a7
- MD5 05fbd8435ed5e28900adcbaf2fe5d0e1
- SHA1 2d803a9488e993e19d0b3c93b27fa28ba6cd6a4e
- SHA512 efd1aacc7c7d54485d182e6b10a87028106f54e0d31fc6b1d562e9f963d178c44e4419a6a03913749729d04aaffd444a1126200cff07f899284067de2c4f239b
- SSDEEP 12288:gwKfOVRo9yRY36CE464O8b8ITDnlL0IiV/8m:gxWVeyRY36CJ64O8b8ITDnl8
- TLSH T15815E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_05fbd8435ed5e28900adcbaf2fe5d0e1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_05fbd8435ed5e28900adcbaf2fe5d0e1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_05fbd8435ed5e28900adcbaf2fe5d0e1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 888KB
- SHA256 82a67c19eaf02088d501c32c5641fdc109cf90c00319c820cd0563a7767a83a7
- MD5 05fbd8435ed5e28900adcbaf2fe5d0e1
- SHA1 2d803a9488e993e19d0b3c93b27fa28ba6cd6a4e
- SHA512 efd1aacc7c7d54485d182e6b10a87028106f54e0d31fc6b1d562e9f963d178c44e4419a6a03913749729d04aaffd444a1126200cff07f899284067de2c4f239b
- SSDEEP 12288:gwKfOVRo9yRY36CE464O8b8ITDnlL0IiV/8m:gxWVeyRY36CJ64O8b8ITDnl8
- TLSH T15815E731B2E5C025F4B23B348D768EB42A26BC526EB5C64F36443B5E2F716B1DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory