General
- Target 2026-11-01_ead6d0ec914514acab929512f609166b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1012KB
- Sample261102-e4hkzazygt
- SHA256 09e31e0b6ef18117828a066b9661c30cdc3b62be3ae209188b05ccfac0fe2055
- MD5 ead6d0ec914514acab929512f609166b
- SHA1 b63aad4720cf32e44d1bca7f7d473e22f19e5ccf
- SHA512 caaf0782c9fc821b666cba5676c9fab135cf39ef1e263965a0f79a7531adb5533be00de523ff689f5b18829ee01e2fd17875c1d4c0822f1bf22f08d4e7fcd84e
- SSDEEP 12288:zwKfOVRo9yRYBz4O8b8ITDnljFF0y4gBgdhEqe:zxWVeyRYBz4O8b8ITDnljFile
- TLSH T1F8251A31B3E8C019E4B63B349976CEA03E667C215EB5864F36483B5E2F716A1DD21327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_ead6d0ec914514acab929512f609166b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_ead6d0ec914514acab929512f609166b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_ead6d0ec914514acab929512f609166b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1012KB
- SHA256 09e31e0b6ef18117828a066b9661c30cdc3b62be3ae209188b05ccfac0fe2055
- MD5 ead6d0ec914514acab929512f609166b
- SHA1 b63aad4720cf32e44d1bca7f7d473e22f19e5ccf
- SHA512 caaf0782c9fc821b666cba5676c9fab135cf39ef1e263965a0f79a7531adb5533be00de523ff689f5b18829ee01e2fd17875c1d4c0822f1bf22f08d4e7fcd84e
- SSDEEP 12288:zwKfOVRo9yRYBz4O8b8ITDnljFF0y4gBgdhEqe:zxWVeyRYBz4O8b8ITDnljFile
- TLSH T1F8251A31B3E8C019E4B63B349976CEA03E667C215EB5864F36483B5E2F716A1DD21327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory