General
- Target 2026-11-03_5750e411a32c2dac3be45ed4d39ed0c0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 982KB
- Sample261104-yvpgpsvsa1
- SHA256 56459703374742ba482079ea47065ba01a001374088c1b523eca619390e9a421
- MD5 5750e411a32c2dac3be45ed4d39ed0c0
- SHA1 fb470c78956ad2b70a4469ecc8082629218fbcd3
- SHA512 6c92a8cd82fbc03e26e3a8fc2b037cedefa2dcf86cca56648319d92142d62c3345223af453a1f96731f9d3ce43feab881a0f49d2fda83de7bd4e1b5a82bdd6df
- SSDEEP 24576:0xWVeyRY1q4z7x/eCIZuZ4O8b8ITDnl/Fkea:08YdZ4O8b8ITDnl/FDa
- TLSH T14925B72163E85B15F1BB7B3099B54A502A77BC515F79C78F22803B0E6E717A0DE22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_5750e411a32c2dac3be45ed4d39ed0c0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_5750e411a32c2dac3be45ed4d39ed0c0_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_5750e411a32c2dac3be45ed4d39ed0c0_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 982KB
- SHA256 56459703374742ba482079ea47065ba01a001374088c1b523eca619390e9a421
- MD5 5750e411a32c2dac3be45ed4d39ed0c0
- SHA1 fb470c78956ad2b70a4469ecc8082629218fbcd3
- SHA512 6c92a8cd82fbc03e26e3a8fc2b037cedefa2dcf86cca56648319d92142d62c3345223af453a1f96731f9d3ce43feab881a0f49d2fda83de7bd4e1b5a82bdd6df
- SSDEEP 24576:0xWVeyRY1q4z7x/eCIZuZ4O8b8ITDnl/Fkea:08YdZ4O8b8ITDnl/FDa
- TLSH T14925B72163E85B15F1BB7B3099B54A502A77BC515F79C78F22803B0E6E717A0DE22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory