General
- Target 2026-10-28_c69c5abbab74896752952c98738c0216_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 890KB
- Sample261029-xmkccastg1
- SHA256 fa99993d7e78e601a03505c308880f5fd588cc85f0d2d70825d76b7aec2a5523
- MD5 c69c5abbab74896752952c98738c0216
- SHA1 a42294d1597eaa9c16363a9cf0b08a648b1b31e5
- SHA512 01084d2b4a0cd522e43ac4a1486d00946baafd75d4fd77f6e121afe092a44b81ada349428a1c42887a5c76ae4ee67fecf948b9b39487c42ccd570a06c31e585a
- SSDEEP 12288:wwKfOVRo9yRYRibO4O8b8ITDnl/FC25OyPY5:wxWVeyRYRiS4O8b8ITDnl/FC2fw
- TLSH T17115B72173E84B15F5BB7B3099B549946A677C11AE75C7CF22803B0E6E70BA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_c69c5abbab74896752952c98738c0216_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_c69c5abbab74896752952c98738c0216_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_c69c5abbab74896752952c98738c0216_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 890KB
- SHA256 fa99993d7e78e601a03505c308880f5fd588cc85f0d2d70825d76b7aec2a5523
- MD5 c69c5abbab74896752952c98738c0216
- SHA1 a42294d1597eaa9c16363a9cf0b08a648b1b31e5
- SHA512 01084d2b4a0cd522e43ac4a1486d00946baafd75d4fd77f6e121afe092a44b81ada349428a1c42887a5c76ae4ee67fecf948b9b39487c42ccd570a06c31e585a
- SSDEEP 12288:wwKfOVRo9yRYRibO4O8b8ITDnl/FC25OyPY5:wxWVeyRYRiS4O8b8ITDnl/FC2fw
- TLSH T17115B72173E84B15F5BB7B3099B549946A677C11AE75C7CF22803B0E6E70BA0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory