General
- Target 2026-11-01_ba07cfa4128db209440a4202ed7ed1d9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- Sample261102-mkh2dsswfs
- SHA256 547cab834da5d4ce4d8e35bbec407369b6c78605b32df480fdfe1a2836d45277
- MD5 ba07cfa4128db209440a4202ed7ed1d9
- SHA1 790ed0e87fd248a8d07bc8d0134912085a0edffa
- SHA512 7d905c55d08a0c83b320daf6978fd47cb81ffa790f6f9fb4f8e1afd14c25ba4c87e9bb2371927906202667479e1d2280ac16cf3b06d084a7e3035100bee874ff
- SSDEEP 12288:JwKfOVRo9yRYgVr4O8b8ITDnljFF0YfBfN78aHJKkEqybJ8:JxWVeyRYQ4O8b8ITDnljFp5F78a48
- TLSH T1E8E583E27FF4B114F0E16E757936A9BC9A637C62DD36824B3247F32D0A722608915327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_ba07cfa4128db209440a4202ed7ed1d9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_ba07cfa4128db209440a4202ed7ed1d9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_ba07cfa4128db209440a4202ed7ed1d9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- SHA256 547cab834da5d4ce4d8e35bbec407369b6c78605b32df480fdfe1a2836d45277
- MD5 ba07cfa4128db209440a4202ed7ed1d9
- SHA1 790ed0e87fd248a8d07bc8d0134912085a0edffa
- SHA512 7d905c55d08a0c83b320daf6978fd47cb81ffa790f6f9fb4f8e1afd14c25ba4c87e9bb2371927906202667479e1d2280ac16cf3b06d084a7e3035100bee874ff
- SSDEEP 12288:JwKfOVRo9yRYgVr4O8b8ITDnljFF0YfBfN78aHJKkEqybJ8:JxWVeyRYQ4O8b8ITDnljFp5F78a48
- TLSH T1E8E583E27FF4B114F0E16E757936A9BC9A637C62DD36824B3247F32D0A722608915327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory