General
- Target 2026-10-22_f12abee63d84ecf3dbe6228d4c84e976_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample261023-dgpkbsht4y
- SHA256 b11cf7aec35d33401f1e95f9215867fa8275a6d8ae116f9c41e15a8924a377d5
- MD5 f12abee63d84ecf3dbe6228d4c84e976
- SHA1 147772b5fcfd4cf755408aa320c92792b9f1399b
- SHA512 a87b2ead5b2f8fcbc1dd711a83287101c311f83d5af0d843a249edd5a392dbf04264e5d343e229619b226a2ba88c46d52c8ea7ff9aebba871de5b459739e9862
- SSDEEP 24576:DxWVeyRY/I4O8b8ITDnlO9zgSo+sqVlZY0/8dx:D8Y/I4O8b8ITDnlOO63ex
- TLSH T1E895943163F98218F6F77B30ADB546A11A77BD62EE78D24E2240376D1D707A0D921B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_f12abee63d84ecf3dbe6228d4c84e976_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_f12abee63d84ecf3dbe6228d4c84e976_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_f12abee63d84ecf3dbe6228d4c84e976_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 b11cf7aec35d33401f1e95f9215867fa8275a6d8ae116f9c41e15a8924a377d5
- MD5 f12abee63d84ecf3dbe6228d4c84e976
- SHA1 147772b5fcfd4cf755408aa320c92792b9f1399b
- SHA512 a87b2ead5b2f8fcbc1dd711a83287101c311f83d5af0d843a249edd5a392dbf04264e5d343e229619b226a2ba88c46d52c8ea7ff9aebba871de5b459739e9862
- SSDEEP 24576:DxWVeyRY/I4O8b8ITDnlO9zgSo+sqVlZY0/8dx:D8Y/I4O8b8ITDnlOO63ex
- TLSH T1E895943163F98218F6F77B30ADB546A11A77BD62EE78D24E2240376D1D707A0D921B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory