General
- Target 2026-11-01_d4d2f7fadd6c1d7c26ac1f8fc72c8569_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 714KB
- Sample261102-jdcdgsed89
- SHA256 41891345632c22f50ece3af1258be2f8a7d18d61fad354b8f21f5ee73a3ff552
- MD5 d4d2f7fadd6c1d7c26ac1f8fc72c8569
- SHA1 1cb258ce81ffb0e0c94d552bbcbea2014286a4a7
- SHA512 c62248bd445dcfcf2a0b8a683371d3a2a655b9bdf62556edcb9818a76d3fff49a2de3b7a9dead4b6301f2015e641ea56c7b37e4103f4e3fb8416bdd5b315c21b
- SSDEEP 12288:VwKfOVRo9yRYcFhi4O8b8ITDnlnFUIPynYI:VxWVeyRYcm4O8b8ITDnlnFUZl
- TLSH T193F4C432B2949F22D45F763049678EA03A63AC255E9247CB37943F1D7F712B1EE2121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_d4d2f7fadd6c1d7c26ac1f8fc72c8569_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_d4d2f7fadd6c1d7c26ac1f8fc72c8569_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_d4d2f7fadd6c1d7c26ac1f8fc72c8569_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 714KB
- SHA256 41891345632c22f50ece3af1258be2f8a7d18d61fad354b8f21f5ee73a3ff552
- MD5 d4d2f7fadd6c1d7c26ac1f8fc72c8569
- SHA1 1cb258ce81ffb0e0c94d552bbcbea2014286a4a7
- SHA512 c62248bd445dcfcf2a0b8a683371d3a2a655b9bdf62556edcb9818a76d3fff49a2de3b7a9dead4b6301f2015e641ea56c7b37e4103f4e3fb8416bdd5b315c21b
- SSDEEP 12288:VwKfOVRo9yRYcFhi4O8b8ITDnlnFUIPynYI:VxWVeyRYcm4O8b8ITDnlnFUZl
- TLSH T193F4C432B2949F22D45F763049678EA03A63AC255E9247CB37943F1D7F712B1EE2121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory