General
- Target 2026-11-01_fafa3c8b1fbbf683a565997987cced66_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- Sample261102-chk3vszvbs
- SHA256 c699288ad6c799f8bf92a4d30f169149fc11f23a8cfa596415da73ab20545be9
- MD5 fafa3c8b1fbbf683a565997987cced66
- SHA1 a0c06823b2a137eca3db1c9472ebb444990363b0
- SHA512 083395b154fa3842de05a4aef7f9e0de55aba30322184771ea138fb9f8aff635e5eb04600e61567d1f4f7872cf917e8c9debabf24f7d1c39313e5e820dd8354f
- SSDEEP 12288:kwKfOVRo9yRYPPz4O8b8ITDnljFF0p4gBC4gBsd8dTEqb:kxWVeyRYPPz4O8b8ITDnljFP4Fmp
- TLSH T114452B31F2E8C01DE4B63634A972CEA02E637C215EB4864F36587B5E1F716A1ED61327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_fafa3c8b1fbbf683a565997987cced66_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_fafa3c8b1fbbf683a565997987cced66_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_fafa3c8b1fbbf683a565997987cced66_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.1MB
- SHA256 c699288ad6c799f8bf92a4d30f169149fc11f23a8cfa596415da73ab20545be9
- MD5 fafa3c8b1fbbf683a565997987cced66
- SHA1 a0c06823b2a137eca3db1c9472ebb444990363b0
- SHA512 083395b154fa3842de05a4aef7f9e0de55aba30322184771ea138fb9f8aff635e5eb04600e61567d1f4f7872cf917e8c9debabf24f7d1c39313e5e820dd8354f
- SSDEEP 12288:kwKfOVRo9yRYPPz4O8b8ITDnljFF0p4gBC4gBsd8dTEqb:kxWVeyRYPPz4O8b8ITDnljFP4Fmp
- TLSH T114452B31F2E8C01DE4B63634A972CEA02E637C215EB4864F36587B5E1F716A1ED61327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory