General
- Target 2026-10-18_21a292dba3af9aeded7b761581947ebf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 834KB
- Sample261018-vhha3ssset
- SHA256 b5d0b2c3b1a6b5c360fdcef8f3ba480ed75de6c9f74d5b90486bbc0d341bbc0e
- MD5 21a292dba3af9aeded7b761581947ebf
- SHA1 46f830f9947b85464c32809a568038a011884ca6
- SHA512 e5ccaadc0f0edad3e5033c2a2b60cd0b13316e036cd3623063b348289cabe4ae1bc7a2aa3437c8568beb2ecb5aa848a6bec3e2a6a329bf6f464516a3f12b3879
- SSDEEP 12288:DwKfOVRo9yRYu7O744O8b8ITDnlgHKYQqLW5oet:DxWVeyRYsO744O8b8ITDnlgqYJLSt
- TLSH T1EB05C72167E84B15F1FB7B7099B44A506A677C51AFB5C3CE12803F4E2A74AA0CD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-18_21a292dba3af9aeded7b761581947ebf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_21a292dba3af9aeded7b761581947ebf_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-18_21a292dba3af9aeded7b761581947ebf_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 834KB
- SHA256 b5d0b2c3b1a6b5c360fdcef8f3ba480ed75de6c9f74d5b90486bbc0d341bbc0e
- MD5 21a292dba3af9aeded7b761581947ebf
- SHA1 46f830f9947b85464c32809a568038a011884ca6
- SHA512 e5ccaadc0f0edad3e5033c2a2b60cd0b13316e036cd3623063b348289cabe4ae1bc7a2aa3437c8568beb2ecb5aa848a6bec3e2a6a329bf6f464516a3f12b3879
- SSDEEP 12288:DwKfOVRo9yRYu7O744O8b8ITDnlgHKYQqLW5oet:DxWVeyRYsO744O8b8ITDnlgqYJLSt
- TLSH T1EB05C72167E84B15F1FB7B7099B44A506A677C51AFB5C3CE12803F4E2A74AA0CD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory