General
- Target 2026-10-21_80b8de8f4b3d3b21f97df89a43bb06fd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample261022-ydldqaxt6q
- SHA256 5e9721ece2cee7a1559591c6aa86d53f6da1d717474ae845745e41901c223b3b
- MD5 80b8de8f4b3d3b21f97df89a43bb06fd
- SHA1 65f363f1bea94c18f015d5b90fe5f96fab83d235
- SHA512 485f8a30a60227d23a58ed43ab30d5caa3deb8212dfbf1c96e6f53af31a4d74b72ed637cf108162b5aa144f45d10a45d6b61b080f9f0c3f28a967b1b03eb727d
- SSDEEP 12288:HwKfOVRo9yRYVc4O8b8ITDnljFF0eaHJKkEqdbpj:HxWVeyRYVc4O8b8ITDnljFBa/j
- TLSH T18E458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_80b8de8f4b3d3b21f97df89a43bb06fd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_80b8de8f4b3d3b21f97df89a43bb06fd_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_80b8de8f4b3d3b21f97df89a43bb06fd_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 5e9721ece2cee7a1559591c6aa86d53f6da1d717474ae845745e41901c223b3b
- MD5 80b8de8f4b3d3b21f97df89a43bb06fd
- SHA1 65f363f1bea94c18f015d5b90fe5f96fab83d235
- SHA512 485f8a30a60227d23a58ed43ab30d5caa3deb8212dfbf1c96e6f53af31a4d74b72ed637cf108162b5aa144f45d10a45d6b61b080f9f0c3f28a967b1b03eb727d
- SSDEEP 12288:HwKfOVRo9yRYVc4O8b8ITDnljFF0eaHJKkEqdbpj:HxWVeyRYVc4O8b8ITDnljFBa/j
- TLSH T18E458121B3F98119F5F73B749D764AA02E76BC229EB5864E3248371D1F70AA0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory