General
- Target 2026-11-07_b8395055442950847993454a74ee6e06_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 954KB
- Sample261107-msdrmsbs2w
- SHA256 c3513bc7d1d874e76d7922973f928ab97492786ae4513b2ac86d21c7091600cb
- MD5 b8395055442950847993454a74ee6e06
- SHA1 350dde4f46e7b8df2145cb1d3ecfc4263be9033c
- SHA512 155876c8d410c326800efeb2a4cb02e6928ea22377409830788cbdd1798ab44ec45182b4c40354c05d5643333c284446a1a8d1df743f9a1358a550ad41e65b25
- SSDEEP 12288:9wKfOVRo9yRYKfz4O8b8ITDnl/FZN+kOyPYfk:9xWVeyRYKL4O8b8ITDnl/FZNDkk
- TLSH T1A525A62163F84B19F5FB7B309DB54A646A777C21AE75C38E12803B4E2D70A60DD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-07_b8395055442950847993454a74ee6e06_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_b8395055442950847993454a74ee6e06_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_b8395055442950847993454a74ee6e06_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 954KB
- SHA256 c3513bc7d1d874e76d7922973f928ab97492786ae4513b2ac86d21c7091600cb
- MD5 b8395055442950847993454a74ee6e06
- SHA1 350dde4f46e7b8df2145cb1d3ecfc4263be9033c
- SHA512 155876c8d410c326800efeb2a4cb02e6928ea22377409830788cbdd1798ab44ec45182b4c40354c05d5643333c284446a1a8d1df743f9a1358a550ad41e65b25
- SSDEEP 12288:9wKfOVRo9yRYKfz4O8b8ITDnl/FZN+kOyPYfk:9xWVeyRYKL4O8b8ITDnl/FZNDkk
- TLSH T1A525A62163F84B19F5FB7B309DB54A646A777C21AE75C38E12803B4E2D70A60DD62723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory