General
- Target 2026-11-01_a94c03793fcba21e5c77455f42b43db9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample261102-phcgyaby8p
- SHA256 883be3d0625e5c18a08ddc196ea7003fa0c739476e3daf18621eed9d426cb7e6
- MD5 a94c03793fcba21e5c77455f42b43db9
- SHA1 ef2b5e883d5b313f5a3f680734b0ba48a33f2312
- SHA512 471a5c61dd0eb96e1f22de1da6216ebe2dcc387b0dfe4b6bd814915f967941e6aba78581bef86f93e6cc457531a3dc70bc9d42c332877afe63200dd00986e5f4
- SSDEEP 12288:9wKfOVRo9yRYUYLmt4O8b8ITDnlE8FF092+uqom/EqRw:9xWVeyRYUYLmt4O8b8ITDnlrF02fq5w
- TLSH T157A59421B2E4C415F2E6273098358BA42926BC119DF88A8B374AFF8F7FF2564DD15316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_a94c03793fcba21e5c77455f42b43db9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_a94c03793fcba21e5c77455f42b43db9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_a94c03793fcba21e5c77455f42b43db9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 883be3d0625e5c18a08ddc196ea7003fa0c739476e3daf18621eed9d426cb7e6
- MD5 a94c03793fcba21e5c77455f42b43db9
- SHA1 ef2b5e883d5b313f5a3f680734b0ba48a33f2312
- SHA512 471a5c61dd0eb96e1f22de1da6216ebe2dcc387b0dfe4b6bd814915f967941e6aba78581bef86f93e6cc457531a3dc70bc9d42c332877afe63200dd00986e5f4
- SSDEEP 12288:9wKfOVRo9yRYUYLmt4O8b8ITDnlE8FF092+uqom/EqRw:9xWVeyRYUYLmt4O8b8ITDnlrF02fq5w
- TLSH T157A59421B2E4C415F2E6273098358BA42926BC119DF88A8B374AFF8F7FF2564DD15316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory