General
- Target 2026-10-10_cb361624dae5cabdc17b5cf7826afda9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1009KB
- Sample261011-cmkb5atzcs
- SHA256 452f28ed314a595196bf1e3ff7f19d3d521878a1279f38c879971551342e5886
- MD5 cb361624dae5cabdc17b5cf7826afda9
- SHA1 5faef222e89937f80169be7ec1f8b13e3b4b25dd
- SHA512 a6e4d708dfa8de572e5c925362bf8d523e2885a5efd8e1bc3c261bc712241dcbf6a67f50507c7282dbdb0337908dded1bba1d4a6777e86340b72a5ca2b313a0e
- SSDEEP 6144:jwynAtMrOVRkidy9yIGWlUihk4O8b8ITDnlznZJQJUE9A2pAEZElax/FscYrd1je:jwKfOVRo9yRYs4O8b8ITDnlL0C2pZ8+
- TLSH T1CA25C521B2D58025F5F63B308D778EA02A26BC565EF5825F3658B70D6F313A1EC2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_cb361624dae5cabdc17b5cf7826afda9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_cb361624dae5cabdc17b5cf7826afda9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_cb361624dae5cabdc17b5cf7826afda9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1009KB
- SHA256 452f28ed314a595196bf1e3ff7f19d3d521878a1279f38c879971551342e5886
- MD5 cb361624dae5cabdc17b5cf7826afda9
- SHA1 5faef222e89937f80169be7ec1f8b13e3b4b25dd
- SHA512 a6e4d708dfa8de572e5c925362bf8d523e2885a5efd8e1bc3c261bc712241dcbf6a67f50507c7282dbdb0337908dded1bba1d4a6777e86340b72a5ca2b313a0e
- SSDEEP 6144:jwynAtMrOVRkidy9yIGWlUihk4O8b8ITDnlznZJQJUE9A2pAEZElax/FscYrd1je:jwKfOVRo9yRYs4O8b8ITDnlL0C2pZ8+
- TLSH T1CA25C521B2D58025F5F63B308D778EA02A26BC565EF5825F3658B70D6F313A1EC2172B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory