General
- Target 2026-10-26_d695db07080bc2095d87d514a99e8d37_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample261027-gdpygaay2y
- SHA256 d213a1276a6007e1ff9a028ba2332bd3b633915f2ba3c2d8b503a0b302e79722
- MD5 d695db07080bc2095d87d514a99e8d37
- SHA1 a6dcb41bbf911e01ffe5441c8d95b54c4d7ff236
- SHA512 996ef413ea42ee2ca85ab46e49d5f303c54c9e53ad2dbb37e5201fa99cf1713c5668f073dc6406ec710772644be128959d72636537bcced3fe515314b30d4f8f
- SSDEEP 24576:sxWVeyRY88nvA7O4O8b8ITDnllmXbrkGVUR:s8Y/4O8b8ITDnllwwGVm
- TLSH T19A65922173F98118F5FB7B70AEB45AA01E77BC62AE74C55E2250334D0A71AA0CD61B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_d695db07080bc2095d87d514a99e8d37_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_d695db07080bc2095d87d514a99e8d37_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_d695db07080bc2095d87d514a99e8d37_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 d213a1276a6007e1ff9a028ba2332bd3b633915f2ba3c2d8b503a0b302e79722
- MD5 d695db07080bc2095d87d514a99e8d37
- SHA1 a6dcb41bbf911e01ffe5441c8d95b54c4d7ff236
- SHA512 996ef413ea42ee2ca85ab46e49d5f303c54c9e53ad2dbb37e5201fa99cf1713c5668f073dc6406ec710772644be128959d72636537bcced3fe515314b30d4f8f
- SSDEEP 24576:sxWVeyRY88nvA7O4O8b8ITDnllmXbrkGVUR:s8Y/4O8b8ITDnllwwGVm
- TLSH T19A65922173F98118F5FB7B70AEB45AA01E77BC62AE74C55E2250334D0A71AA0CD61B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory