General
- Target 2026-10-19_48b40cf56dda4c9308992e80b3278571_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 27.5MB
- Sample261020-1c85hadc75
- SHA256 b7d95b3779efdec910f921b97fc341d5ca7953a7dbf863f7a70e9644f53d13ec
- MD5 48b40cf56dda4c9308992e80b3278571
- SHA1 6a1cbad28ceaf5705f272ecffc4bf4ed99924864
- SHA512 c4590da642eb4b7916832a3e066bfbaf557998a355bda22fcf362d948b101f81e8e8c8cc7aa3e767aa4b4deb9f503853a8bf18554972526b2347386bbfecd31e
- SSDEEP 786432:bwDzDsBnXydqA+UHdl2ui3WOsk9BKeVVe90A2xt:bwDzIRQqA1HHFiGo9nVeY
- TLSH T1CE5723D7FAE8B120F0F66B3479354ABE5A237C41AD75C25E325BF71D1A706A09C20326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-19_48b40cf56dda4c9308992e80b3278571_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_48b40cf56dda4c9308992e80b3278571_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_48b40cf56dda4c9308992e80b3278571_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 27.5MB
- SHA256 b7d95b3779efdec910f921b97fc341d5ca7953a7dbf863f7a70e9644f53d13ec
- MD5 48b40cf56dda4c9308992e80b3278571
- SHA1 6a1cbad28ceaf5705f272ecffc4bf4ed99924864
- SHA512 c4590da642eb4b7916832a3e066bfbaf557998a355bda22fcf362d948b101f81e8e8c8cc7aa3e767aa4b4deb9f503853a8bf18554972526b2347386bbfecd31e
- SSDEEP 786432:bwDzDsBnXydqA+UHdl2ui3WOsk9BKeVVe90A2xt:bwDzIRQqA1HHFiGo9nVeY
- TLSH T1CE5723D7FAE8B120F0F66B3479354ABE5A237C41AD75C25E325BF71D1A706A09C20326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory