General
- Target 2026-10-16_3b9331417c2df2d4e3a88fb579c8d96f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample261017-ycsfmscw2t
- SHA256 068c245982c2647c0f9defa7639f0dfc29d16ddad67adaddeb0cf103a9b83ef0
- MD5 3b9331417c2df2d4e3a88fb579c8d96f
- SHA1 f91d4f9660115b6791fadf3914428f552e6d26c6
- SHA512 dc67925af00ecf307374b51b6e89e530ef0c7003a6bdee3e068cc5381553236717796609e1a9e6945d999b7a27d57d2cbb42aa39e4e0c4d8abdfbae81f9ac512
- SSDEEP 12288:wwKfOVRo9yRYbB7B4O8b8ITDnlRSgT7Wq3yo9+xrdJVO2:wxWVeyRYbB7B4O8b8ITDnlRSIF3urLz
- TLSH T10B45C72963F9412BF5B2377094782F501A71BE76EAB2C61D75043306AB71BE2C822777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_3b9331417c2df2d4e3a88fb579c8d96f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_3b9331417c2df2d4e3a88fb579c8d96f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_3b9331417c2df2d4e3a88fb579c8d96f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 068c245982c2647c0f9defa7639f0dfc29d16ddad67adaddeb0cf103a9b83ef0
- MD5 3b9331417c2df2d4e3a88fb579c8d96f
- SHA1 f91d4f9660115b6791fadf3914428f552e6d26c6
- SHA512 dc67925af00ecf307374b51b6e89e530ef0c7003a6bdee3e068cc5381553236717796609e1a9e6945d999b7a27d57d2cbb42aa39e4e0c4d8abdfbae81f9ac512
- SSDEEP 12288:wwKfOVRo9yRYbB7B4O8b8ITDnlRSgT7Wq3yo9+xrdJVO2:wxWVeyRYbB7B4O8b8ITDnlRSIF3urLz
- TLSH T10B45C72963F9412BF5B2377094782F501A71BE76EAB2C61D75043306AB71BE2C822777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory