General
- Target 2026-11-03_4303515f610ea48ca7441f2569881dd0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 948KB
- Sample261104-2d9yvsvxhy
- SHA256 8a13e214d73b9639a8ad95c28e30c55fe6dbc04ae63f6afc96f2a45c3ce29b34
- MD5 4303515f610ea48ca7441f2569881dd0
- SHA1 efe8a20e54a09bb43cda21241958aeb54897a21b
- SHA512 7fc77e1af7d3da576ea7e75b915e3207fcf12b34be24298aed63c63e01fb322e22fe1dec4153701a7aef1304e274fd70b8c9035796a90de40824add3a629d070
- SSDEEP 12288:2wKfOVRo9yRYjnxGz4O8b8ITDnl/FZN+kOyPY/S:2xWVeyRYjnxG4O8b8ITDnl/FZNDUS
- TLSH T18B25A62163F84B19F5FB7B309DB54A646A777C21AE75C38E12803B4E2D70A60DD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_4303515f610ea48ca7441f2569881dd0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_4303515f610ea48ca7441f2569881dd0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_4303515f610ea48ca7441f2569881dd0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 948KB
- SHA256 8a13e214d73b9639a8ad95c28e30c55fe6dbc04ae63f6afc96f2a45c3ce29b34
- MD5 4303515f610ea48ca7441f2569881dd0
- SHA1 efe8a20e54a09bb43cda21241958aeb54897a21b
- SHA512 7fc77e1af7d3da576ea7e75b915e3207fcf12b34be24298aed63c63e01fb322e22fe1dec4153701a7aef1304e274fd70b8c9035796a90de40824add3a629d070
- SSDEEP 12288:2wKfOVRo9yRYjnxGz4O8b8ITDnl/FZN+kOyPY/S:2xWVeyRYjnxG4O8b8ITDnl/FZNDUS
- TLSH T18B25A62163F84B19F5FB7B309DB54A646A777C21AE75C38E12803B4E2D70A60DD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory