General
- Target 2026-10-17_9c10590b5c69183f88130ed15fdab96a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample261018-2477ysty4m
- SHA256 dcc75c17838fd020ab216ea3ec9323731b690d692f04aa1ef44cf36429609673
- MD5 9c10590b5c69183f88130ed15fdab96a
- SHA1 ff32610e1b18cc316a79a37d6215aadf86f296fc
- SHA512 8c963205e4ff9a50df29d35a5fbe5c280209aa35e4e27d7b5126b256ee34c5061c953ddf2f0b9cacdfc1031d5201c8651134f9ce1b07ccaaf0db6a1c685c50b6
- SSDEEP 12288:XwKfOVRo9yRYnmNLmZ4O8b8ITDnljFF0S87EqJu:XxWVeyRYmNLmZ4O8b8ITDnljFgu
- TLSH T14C350B23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-17_9c10590b5c69183f88130ed15fdab96a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-17_9c10590b5c69183f88130ed15fdab96a_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_9c10590b5c69183f88130ed15fdab96a_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 dcc75c17838fd020ab216ea3ec9323731b690d692f04aa1ef44cf36429609673
- MD5 9c10590b5c69183f88130ed15fdab96a
- SHA1 ff32610e1b18cc316a79a37d6215aadf86f296fc
- SHA512 8c963205e4ff9a50df29d35a5fbe5c280209aa35e4e27d7b5126b256ee34c5061c953ddf2f0b9cacdfc1031d5201c8651134f9ce1b07ccaaf0db6a1c685c50b6
- SSDEEP 12288:XwKfOVRo9yRYnmNLmZ4O8b8ITDnljFF0S87EqJu:XxWVeyRYmNLmZ4O8b8ITDnljFgu
- TLSH T14C350B23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory