General
- Target 2026-10-16_c87061ccba7ec33a74d724ba25d573db_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- Sample261017-hvmecabt2p
- SHA256 8e9041a4cc77fea66b712aa00970c7b8292efa62d48c55eeae3d8bc1b06f689c
- MD5 c87061ccba7ec33a74d724ba25d573db
- SHA1 6a0a403a6000f1150bd54839ef949cb59590766c
- SHA512 a661e97b8c60bf2f9a4772a98d72eab1406a4ce22f0d2666852e2daa16bbb5c79429bf9c2f3d2338c609a7dee39c18bb1a9365c10956e81dd1506aae905a84da
- SSDEEP 49152:e8Yw4O8b8ITDnljFv5r2xM1MQ6xKF+LWngB7GFM/K2HX:rYv5r2u65ysWngBSu/HX
- TLSH T1E206F423DFB58414E0729F35C8236AA019323D5987685A4F1AA4B63F4EF37426E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_c87061ccba7ec33a74d724ba25d573db_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_c87061ccba7ec33a74d724ba25d573db_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_c87061ccba7ec33a74d724ba25d573db_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.5MB
- SHA256 8e9041a4cc77fea66b712aa00970c7b8292efa62d48c55eeae3d8bc1b06f689c
- MD5 c87061ccba7ec33a74d724ba25d573db
- SHA1 6a0a403a6000f1150bd54839ef949cb59590766c
- SHA512 a661e97b8c60bf2f9a4772a98d72eab1406a4ce22f0d2666852e2daa16bbb5c79429bf9c2f3d2338c609a7dee39c18bb1a9365c10956e81dd1506aae905a84da
- SSDEEP 49152:e8Yw4O8b8ITDnljFv5r2xM1MQ6xKF+LWngB7GFM/K2HX:rYv5r2u65ysWngBSu/HX
- TLSH T1E206F423DFB58414E0729F35C8236AA019323D5987685A4F1AA4B63F4EF37426E5733B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory