General
- Target 2026-11-01_c188ee1845cf46c7302d5a189e263926_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- Sample261102-lpap5sgx2s
- SHA256 1e69ab2370cf0aa9e2148c2bbea8c157d2938231aea203f5ecfa27b75ab090ad
- MD5 c188ee1845cf46c7302d5a189e263926
- SHA1 5ac36fe1ddcfaad5e1fa56a1b34a8a078ad312e0
- SHA512 dbee989e6901d3f3bc5a4a68ed91e875e53af972a0e7116d2de0c35e1edf7b38cefb56a38dc5c894f0bcca77cab43403ce7f58b3d0d0a26951cb6a7ead327419
- SSDEEP 12288:DwKfOVRo9yRYJD4O8b8ITDnlXivX1Gbe2:DxWVeyRYJD4O8b8ITDnlSdX2
- TLSH T14455622167E4CA15F2FB7B3099B44A542A277C115EF587CE1342BF4E3AB16A0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c188ee1845cf46c7302d5a189e263926_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c188ee1845cf46c7302d5a189e263926_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c188ee1845cf46c7302d5a189e263926_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.3MB
- SHA256 1e69ab2370cf0aa9e2148c2bbea8c157d2938231aea203f5ecfa27b75ab090ad
- MD5 c188ee1845cf46c7302d5a189e263926
- SHA1 5ac36fe1ddcfaad5e1fa56a1b34a8a078ad312e0
- SHA512 dbee989e6901d3f3bc5a4a68ed91e875e53af972a0e7116d2de0c35e1edf7b38cefb56a38dc5c894f0bcca77cab43403ce7f58b3d0d0a26951cb6a7ead327419
- SSDEEP 12288:DwKfOVRo9yRYJD4O8b8ITDnlXivX1Gbe2:DxWVeyRYJD4O8b8ITDnlSdX2
- TLSH T14455622167E4CA15F2FB7B3099B44A542A277C115EF587CE1342BF4E3AB16A0DD22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory