General
- Target 2026-10-28_9490b64addaea94aa4489e58aa64e89e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample261029-3adxpacf87
- SHA256 ecda9d0b3305d4d6981f5e1fac35b3990e7a87077726b3581b11cf8e07f9a911
- MD5 9490b64addaea94aa4489e58aa64e89e
- SHA1 fdf8d8c48e9daa2f3901f1d11f509410337671f2
- SHA512 b49e23e2a13cfd22e7bec4b7658e63766aa936d25e0ad385b26f74b48c70d4a1eb40e776cfcabbdb8660354c488cdcc00e4391f5c86417531d896706c02c98a4
- SSDEEP 24576:8xWVeyRYPe4O8b8ITDnlfPe0bQBEUOnNFCEN0:88Ym4O8b8ITDnlfPeuQBEUOnNFCEN0
- TLSH T1B7351A22B6D4D025E4B63B304DB78EA43926BC21AEF1C64F36947F1E5F396A0DD20716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_9490b64addaea94aa4489e58aa64e89e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_9490b64addaea94aa4489e58aa64e89e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_9490b64addaea94aa4489e58aa64e89e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 ecda9d0b3305d4d6981f5e1fac35b3990e7a87077726b3581b11cf8e07f9a911
- MD5 9490b64addaea94aa4489e58aa64e89e
- SHA1 fdf8d8c48e9daa2f3901f1d11f509410337671f2
- SHA512 b49e23e2a13cfd22e7bec4b7658e63766aa936d25e0ad385b26f74b48c70d4a1eb40e776cfcabbdb8660354c488cdcc00e4391f5c86417531d896706c02c98a4
- SSDEEP 24576:8xWVeyRYPe4O8b8ITDnlfPe0bQBEUOnNFCEN0:88Ym4O8b8ITDnlfPeuQBEUOnNFCEN0
- TLSH T1B7351A22B6D4D025E4B63B304DB78EA43926BC21AEF1C64F36947F1E5F396A0DD20716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory