General
- Target 2026-11-07_9a62228f716a171d631a89268df8fbb9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 927KB
- Sample261107-n1pdsaxyhs
- SHA256 847e675dd0a207dcb35a4e12f10088445b54186821de2362b308be4dbb42fc63
- MD5 9a62228f716a171d631a89268df8fbb9
- SHA1 e67c74987786b6beb1c27736b9fedc754a2727a9
- SHA512 b64f05ed2611cb086e5d81a56810ee1134db142ca8dc98b9e348f8cec4c21a2b713c3a33bb0d4e50f362d5398bc6cddb32759cac12f4ed8e1516e8389500da08
- SSDEEP 12288:HwKfOVRo9yRY5jbz4O8b8ITDnljFF04EqZ:HxWVeyRYRbz4O8b8ITDnljFl
- TLSH T14C15F921B2E4C025E5B63B348D768EB43A26BC116EB5C64F37943B1E6F716B0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-07_9a62228f716a171d631a89268df8fbb9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_9a62228f716a171d631a89268df8fbb9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_9a62228f716a171d631a89268df8fbb9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 927KB
- SHA256 847e675dd0a207dcb35a4e12f10088445b54186821de2362b308be4dbb42fc63
- MD5 9a62228f716a171d631a89268df8fbb9
- SHA1 e67c74987786b6beb1c27736b9fedc754a2727a9
- SHA512 b64f05ed2611cb086e5d81a56810ee1134db142ca8dc98b9e348f8cec4c21a2b713c3a33bb0d4e50f362d5398bc6cddb32759cac12f4ed8e1516e8389500da08
- SSDEEP 12288:HwKfOVRo9yRY5jbz4O8b8ITDnljFF04EqZ:HxWVeyRYRbz4O8b8ITDnljFl
- TLSH T14C15F921B2E4C025E5B63B348D768EB43A26BC116EB5C64F37943B1E6F716B0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory