General
- Target 2026-11-01_8fb52ac389ff22f23b746639f5daad1e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 852KB
- Sample261102-sc7mnsvsfw
- SHA256 0d50335ddcbc22191e5e3b7c0cfda886d3ef7580af2690c097143cb54a5f62c9
- MD5 8fb52ac389ff22f23b746639f5daad1e
- SHA1 7f864db47813451340e67e676cd5615b6065852b
- SHA512 5051967a55c972b212e80e16950a7c44a1f58f0106034230aed02b8f3f1a63f714622fbb2ca4642630d449967257500674589c0345000d5742b59486b56f3dca
- SSDEEP 12288:awKfOVRo9yRYSO744O8b8ITDnlGHKYQqLW5/JO:axWVeyRYSO744O8b8ITDnlGqYJLOO
- TLSH T18E05C82267E84B15F1FB7B309DB449506A677C52AEB5C3CE12403B4E7A74AA0CD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_8fb52ac389ff22f23b746639f5daad1e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_8fb52ac389ff22f23b746639f5daad1e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_8fb52ac389ff22f23b746639f5daad1e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 852KB
- SHA256 0d50335ddcbc22191e5e3b7c0cfda886d3ef7580af2690c097143cb54a5f62c9
- MD5 8fb52ac389ff22f23b746639f5daad1e
- SHA1 7f864db47813451340e67e676cd5615b6065852b
- SHA512 5051967a55c972b212e80e16950a7c44a1f58f0106034230aed02b8f3f1a63f714622fbb2ca4642630d449967257500674589c0345000d5742b59486b56f3dca
- SSDEEP 12288:awKfOVRo9yRYSO744O8b8ITDnlGHKYQqLW5/JO:axWVeyRYSO744O8b8ITDnlGqYJLOO
- TLSH T18E05C82267E84B15F1FB7B309DB449506A677C52AEB5C3CE12403B4E7A74AA0CD72723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory