General
- Target 2026-10-11_3d2db112cb30169d602f6c827f81a6a8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 954KB
- Sample261012-3tyffafe66
- SHA256 9944cc43e6230a6f31854c37b353fc26cf45dd6d94ac2d5050009cfe4ea83f4e
- MD5 3d2db112cb30169d602f6c827f81a6a8
- SHA1 76ef24d6c2059740c256b19f9ffe9106945ac260
- SHA512 d3568c4bcec738ae55a662a528b3716eed3d1d7ce9b78cb1a0d1a15b7975bf05491fc27af4321de836c1aa7144b1c2079dbf1f7f12dee68f49a1a91ebdf2a989
- SSDEEP 12288:RwKfOVRo9yRY3B7B4O8b8ITDnlFX5QGkq3yo8xwdzVOc:RxWVeyRY3B7B4O8b8ITDnlFXKI3+MRR
- TLSH T15C25A43163FD8129F6F377B4A9705EA12EB6FC63DAB4854D224423184BB09A0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_3d2db112cb30169d602f6c827f81a6a8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_3d2db112cb30169d602f6c827f81a6a8_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_3d2db112cb30169d602f6c827f81a6a8_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 954KB
- SHA256 9944cc43e6230a6f31854c37b353fc26cf45dd6d94ac2d5050009cfe4ea83f4e
- MD5 3d2db112cb30169d602f6c827f81a6a8
- SHA1 76ef24d6c2059740c256b19f9ffe9106945ac260
- SHA512 d3568c4bcec738ae55a662a528b3716eed3d1d7ce9b78cb1a0d1a15b7975bf05491fc27af4321de836c1aa7144b1c2079dbf1f7f12dee68f49a1a91ebdf2a989
- SSDEEP 12288:RwKfOVRo9yRY3B7B4O8b8ITDnlFX5QGkq3yo8xwdzVOc:RxWVeyRY3B7B4O8b8ITDnlFXKI3+MRR
- TLSH T15C25A43163FD8129F6F377B4A9705EA12EB6FC63DAB4854D224423184BB09A0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory