General
- Target 2026-10-16_a65eb04b3363bd6c820f4847c2cc5485_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample261017-l45ttsec72
- SHA256 39e3af2eb0b3427b44bcb6fc06e4580ce3ab890fdf6d739fac605f28a7930893
- MD5 a65eb04b3363bd6c820f4847c2cc5485
- SHA1 6f6e4404198eb2aecd5d69d0aca04994b0555480
- SHA512 99b33890739dae62cebe27dc5ddb38c4ca5ecd29adbd96c6c30ecd427b15290451237bb71dfc9b4348491ce4a3c633cd58a1b2d7c002a3b87f9775acc3dbd3cf
- SSDEEP 12288:zwKfOVRo9yRYcCYLmZ4O8b8ITDnljFF04Kk87Eqg+:zxWVeyRYcCYLmZ4O8b8ITDnljFZKm+
- TLSH T19435FA23F2D4C015E5BB3730497A8EB42A27BC516EB0939B329C3B4D6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_a65eb04b3363bd6c820f4847c2cc5485_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_a65eb04b3363bd6c820f4847c2cc5485_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_a65eb04b3363bd6c820f4847c2cc5485_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 39e3af2eb0b3427b44bcb6fc06e4580ce3ab890fdf6d739fac605f28a7930893
- MD5 a65eb04b3363bd6c820f4847c2cc5485
- SHA1 6f6e4404198eb2aecd5d69d0aca04994b0555480
- SHA512 99b33890739dae62cebe27dc5ddb38c4ca5ecd29adbd96c6c30ecd427b15290451237bb71dfc9b4348491ce4a3c633cd58a1b2d7c002a3b87f9775acc3dbd3cf
- SSDEEP 12288:zwKfOVRo9yRYcCYLmZ4O8b8ITDnljFF04Kk87Eqg+:zxWVeyRYcCYLmZ4O8b8ITDnljFZKm+
- TLSH T19435FA23F2D4C015E5BB3730497A8EB42A27BC516EB0939B329C3B4D6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory