General
- Target 2026-10-28_c950e6536127ac93657a18b97ca962cb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- Sample261029-xee3nasx4j
- SHA256 cbad73890b54f90466dabe89a3411fd1122e5943e5e84017a36e9c62971b180e
- MD5 c950e6536127ac93657a18b97ca962cb
- SHA1 1898beccebf4e2a4a5632d605cb00cebfdfb4e61
- SHA512 8164cc048bd5998d1acee0de75a3014b690da93d3ec9100aea5569c74eda0e3a63673633f14b4a9f590aedc5fbed22a683398fa900a500fcab95e44e75a1af5e
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUipPy94O8b8ITDnlznZJQJUEbA0pAEZElax/FscYrdx:iwKfOVRo9yRYv04O8b8ITDnlL080pZ8z
- TLSH T15225B521B2D58025F5B23B308D778E602A26BC565EF5825F3658B70D6F313A1FC61B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_c950e6536127ac93657a18b97ca962cb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_c950e6536127ac93657a18b97ca962cb_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_c950e6536127ac93657a18b97ca962cb_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.0MB
- SHA256 cbad73890b54f90466dabe89a3411fd1122e5943e5e84017a36e9c62971b180e
- MD5 c950e6536127ac93657a18b97ca962cb
- SHA1 1898beccebf4e2a4a5632d605cb00cebfdfb4e61
- SHA512 8164cc048bd5998d1acee0de75a3014b690da93d3ec9100aea5569c74eda0e3a63673633f14b4a9f590aedc5fbed22a683398fa900a500fcab95e44e75a1af5e
- SSDEEP 6144:iwynAtMrOVRkidy9yIGWlUipPy94O8b8ITDnlznZJQJUEbA0pAEZElax/FscYrdx:iwKfOVRo9yRYv04O8b8ITDnlL080pZ8z
- TLSH T15225B521B2D58025F5B23B308D778E602A26BC565EF5825F3658B70D6F313A1FC61B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory