General
- Target 2026-10-27_f4f1b1585bc0d9ac023c46650f898296_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 712KB
- Sample261027-1fafcagy8p
- SHA256 6eeb96617ad35621ca026e835c96787e19bf4255c2ce9027bd2b400241c00746
- MD5 f4f1b1585bc0d9ac023c46650f898296
- SHA1 8b2c81aed289b8eb1c3b618d4f7373e4a3ba89db
- SHA512 56df190922acc7b924e092c2326f8e41de57a4ec2ea24431aefb862348b53ffb28502b395c292a0ea696012a5334932101d1e471b8a342bcd53b3a64d6f03187
- SSDEEP 12288:xwKfOVRo9yRYvCFhi4O8b8ITDnlnFUIPynYD:xxWVeyRY6m4O8b8ITDnlnFUZu
- TLSH T1ABF4C432B2949F22D45F763049678EA03A63AC255E9247CB37943F1D7F712B1EE2121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-27_f4f1b1585bc0d9ac023c46650f898296_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_f4f1b1585bc0d9ac023c46650f898296_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_f4f1b1585bc0d9ac023c46650f898296_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 712KB
- SHA256 6eeb96617ad35621ca026e835c96787e19bf4255c2ce9027bd2b400241c00746
- MD5 f4f1b1585bc0d9ac023c46650f898296
- SHA1 8b2c81aed289b8eb1c3b618d4f7373e4a3ba89db
- SHA512 56df190922acc7b924e092c2326f8e41de57a4ec2ea24431aefb862348b53ffb28502b395c292a0ea696012a5334932101d1e471b8a342bcd53b3a64d6f03187
- SSDEEP 12288:xwKfOVRo9yRYvCFhi4O8b8ITDnlnFUIPynYD:xxWVeyRY6m4O8b8ITDnlnFUZu
- TLSH T1ABF4C432B2949F22D45F763049678EA03A63AC255E9247CB37943F1D7F712B1EE2121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory