General
- Target 2026-10-16_e97303c3c966ee6d6d0277e7bb1efc56_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample261017-ehtfcass6j
- SHA256 1983b8d8c3f23e8f1a4b6e39dbcae973b6882486c189e820366182a13f2ca73c
- MD5 e97303c3c966ee6d6d0277e7bb1efc56
- SHA1 379427b2b6be0e7b34fea2db973401c44fb98d34
- SHA512 eb3fc2493f6baed3bc8d997d6ceec6d660ef13cfadc546914e0c26f371f1f5b3ae7f9f17cf1d3b70ea58e662ca882fe42865cdccf2b950fe1b5d0d49786131da
- SSDEEP 12288:/wKfOVRo9yRYjz4O8b8ITDnl/FF0aAHfEqu4:/xWVeyRYjz4O8b8ITDnl/Ff4
- TLSH T1CE35D861B2E48025F6B62B304976CAF02925BC355DB5D24FB6543B2E1F316A2DD2332F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_e97303c3c966ee6d6d0277e7bb1efc56_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_e97303c3c966ee6d6d0277e7bb1efc56_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_e97303c3c966ee6d6d0277e7bb1efc56_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 1983b8d8c3f23e8f1a4b6e39dbcae973b6882486c189e820366182a13f2ca73c
- MD5 e97303c3c966ee6d6d0277e7bb1efc56
- SHA1 379427b2b6be0e7b34fea2db973401c44fb98d34
- SHA512 eb3fc2493f6baed3bc8d997d6ceec6d660ef13cfadc546914e0c26f371f1f5b3ae7f9f17cf1d3b70ea58e662ca882fe42865cdccf2b950fe1b5d0d49786131da
- SSDEEP 12288:/wKfOVRo9yRYjz4O8b8ITDnl/FF0aAHfEqu4:/xWVeyRYjz4O8b8ITDnl/Ff4
- TLSH T1CE35D861B2E48025F6B62B304976CAF02925BC355DB5D24FB6543B2E1F316A2DD2332F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory