General
- Target 2026-11-01_c24a21d26536b3db9c1aa51803281bc1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample261102-llevpagw8x
- SHA256 a2d5129cd1c75778f9ff435e6d78846168ad8cd0d6d9921566bf2aae15b2dd39
- MD5 c24a21d26536b3db9c1aa51803281bc1
- SHA1 e9da87b9ae88f33e6883a65872e1adc305919c4f
- SHA512 af151d522932e914c76e6fb771a409d1ef8c8b2c9c93195c0b8bc9948a96335cf1e444c2fa3a8fdb5cc9dd94a9638595ec76093006bba023987a602db6d3b1eb
- SSDEEP 12288:PwKfOVRo9yRYw24O8b8ITDnlPfFYonYGxYY:PxWVeyRYw24O8b8ITDnlnFYXQZ
- TLSH T17755B3317690DE26E29F323098628EA835176C144ED54BC73397FF4F7AB22A5DD1620B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c24a21d26536b3db9c1aa51803281bc1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c24a21d26536b3db9c1aa51803281bc1_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c24a21d26536b3db9c1aa51803281bc1_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 a2d5129cd1c75778f9ff435e6d78846168ad8cd0d6d9921566bf2aae15b2dd39
- MD5 c24a21d26536b3db9c1aa51803281bc1
- SHA1 e9da87b9ae88f33e6883a65872e1adc305919c4f
- SHA512 af151d522932e914c76e6fb771a409d1ef8c8b2c9c93195c0b8bc9948a96335cf1e444c2fa3a8fdb5cc9dd94a9638595ec76093006bba023987a602db6d3b1eb
- SSDEEP 12288:PwKfOVRo9yRYw24O8b8ITDnlPfFYonYGxYY:PxWVeyRYw24O8b8ITDnlnFYXQZ
- TLSH T17755B3317690DE26E29F323098628EA835176C144ED54BC73397FF4F7AB22A5DD1620B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory