Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/10/2026, 10:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_a3f90aa7cd087cab326bca56f3505516_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_a3f90aa7cd087cab326bca56f3505516_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-26_a3f90aa7cd087cab326bca56f3505516_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-26_a3f90aa7cd087cab326bca56f3505516_elex_remcos_smoke-loader_stealc_stop_tofsee.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-26_a3f90aa7cd087cab326bca56f3505516_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
- Size 889KB
- Sample261027-macrmads2j
- SHA256 a2b4c5be7ce034d5f3f74cb1d00997bb0d8f48d960270fabb82891f45952f05c
- MD5 a3f90aa7cd087cab326bca56f3505516
- SHA1 3bcc9b227160ce90e44b3a2185bf4b35b991f6d7
- SHA512 ec7c633b041c98d190e49ed1e52b9aadbf46e6009ad6b92e05c1a8a4a2030a98256957355a36859ec4c060cece30729e20cedf4986aa790acbde9e39f1a517e7
- SSDEEP 12288:iwKfOVRo9yRYBlNc4O8b8ITDnljFF0eaHJKy:ixWVeyRYBLc4O8b8ITDnljFBa5
- TLSH T182157221B3F9C125F5F73B749D768AA42A76BC22AEB4864F3244371D1B706A0DD20727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10