General

  • Target
    2026-11-01_a92cb0029825975d09a924020724c18a_elex_remcos_smoke-loader_stealc_stop_tofsee
  • Size 861KB
  • Sample261102-phs5pav14m
  • SHA256 b53a2566ab9200cfdeeceb430897e2f3e776649fe0d01785bf91d5326e7d1989
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-01_a92cb0029825975d09a924020724c18a_elex_remcos_smoke-loader_stealc_stop_tofsee
    • Size 861KB
    • SHA256 b53a2566ab9200cfdeeceb430897e2f3e776649fe0d01785bf91d5326e7d1989
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks