General
- Target 2026-10-31_e5092b874512e90be7603129c6f5d6db_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample261101-xrmchada99
- SHA256 fb6bae4cd30c3497085e42271bfd06ba30b45f174856f5611282102d0fa5393d
- MD5 e5092b874512e90be7603129c6f5d6db
- SHA1 2ff714a29231f0da13ffbdf07c77ff2bea74debe
- SHA512 41ab877c0656b1b74eb429229101151f1d696527d24556740ea48b2738db3128c8d5dfafd0ee804e4fe67aeed9d0151fb9fe09a0abd550e6eb2c93b95c088be3
- SSDEEP 12288:HwKfOVRo9yRYyeS2LmZ4O8b8ITDnljFF0S87Eq0a:HxWVeyRYK2LmZ4O8b8ITDnljF5a
- TLSH T10D35FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-31_e5092b874512e90be7603129c6f5d6db_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-31_e5092b874512e90be7603129c6f5d6db_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-31_e5092b874512e90be7603129c6f5d6db_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 fb6bae4cd30c3497085e42271bfd06ba30b45f174856f5611282102d0fa5393d
- MD5 e5092b874512e90be7603129c6f5d6db
- SHA1 2ff714a29231f0da13ffbdf07c77ff2bea74debe
- SHA512 41ab877c0656b1b74eb429229101151f1d696527d24556740ea48b2738db3128c8d5dfafd0ee804e4fe67aeed9d0151fb9fe09a0abd550e6eb2c93b95c088be3
- SSDEEP 12288:HwKfOVRo9yRYyeS2LmZ4O8b8ITDnljFF0S87Eq0a:HxWVeyRYK2LmZ4O8b8ITDnljF5a
- TLSH T10D35FB23F2D4C014E5B727304D7A8EB42A27BC516EB0939B329C3B5E6F756A0ED25316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory