General
- Target 2026-11-06_cbfbd48ee2a90dbb2324f379cb914a6f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 867KB
- Sample261107-27ae4af16s
- SHA256 d25223b2bd79bb2bf3cc5b59bab4580d686cc1444f057be396231db5ac6bcb10
- MD5 cbfbd48ee2a90dbb2324f379cb914a6f
- SHA1 e4590809a2be7abcc0ca9aead25961b76aa835f1
- SHA512 a44cb395a73183979a27df94a8ff2a63b0218dfb745d831a73c62a4335c63fa7b82fe6157b44c56f2586d0ef11098b1106c659bf4c8a76fdccf7df361d306a50
- SSDEEP 12288:qwKfOVRo9yRYCCTz4O8b8ITDnljFF0GEqE2:qxWVeyRYHTz4O8b8ITDnljFe2
- TLSH T19515E831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-06_cbfbd48ee2a90dbb2324f379cb914a6f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_cbfbd48ee2a90dbb2324f379cb914a6f_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_cbfbd48ee2a90dbb2324f379cb914a6f_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 867KB
- SHA256 d25223b2bd79bb2bf3cc5b59bab4580d686cc1444f057be396231db5ac6bcb10
- MD5 cbfbd48ee2a90dbb2324f379cb914a6f
- SHA1 e4590809a2be7abcc0ca9aead25961b76aa835f1
- SHA512 a44cb395a73183979a27df94a8ff2a63b0218dfb745d831a73c62a4335c63fa7b82fe6157b44c56f2586d0ef11098b1106c659bf4c8a76fdccf7df361d306a50
- SSDEEP 12288:qwKfOVRo9yRYCCTz4O8b8ITDnljFF0GEqE2:qxWVeyRYHTz4O8b8ITDnljFe2
- TLSH T19515E831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory