General
- Target 2026-11-07_73d0551e83d10dc0b36453e014dc56d7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- Sample261107-p44tbab151
- SHA256 ea1e8d3c2be09326d3cefe34aa90ed911faccc099ee5e2365ee508a87c64018e
- MD5 73d0551e83d10dc0b36453e014dc56d7
- SHA1 108be1bd2bb957ce0abc084f18ac459c618027e1
- SHA512 c1f832a3a7f9610b4221240fd72031cc1b76c9690e707a4db1d90ad5b586b8b8330c1f888b1458994d8de1913982d3d7fd4125d22fb785ceedbf3b3cb2af6015
- SSDEEP 12288:IwKfOVRo9yRYx6f4O8b8ITDnl/Fkl8bfSgPYe+:IxWVeyRYxy4O8b8ITDnl/FksqER+
- TLSH T14A9594E27FE0B615F0F76E31797559BCAA633C619D72828B2283F71E2931660C916313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-07_73d0551e83d10dc0b36453e014dc56d7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_73d0551e83d10dc0b36453e014dc56d7_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_73d0551e83d10dc0b36453e014dc56d7_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 1.8MB
- SHA256 ea1e8d3c2be09326d3cefe34aa90ed911faccc099ee5e2365ee508a87c64018e
- MD5 73d0551e83d10dc0b36453e014dc56d7
- SHA1 108be1bd2bb957ce0abc084f18ac459c618027e1
- SHA512 c1f832a3a7f9610b4221240fd72031cc1b76c9690e707a4db1d90ad5b586b8b8330c1f888b1458994d8de1913982d3d7fd4125d22fb785ceedbf3b3cb2af6015
- SSDEEP 12288:IwKfOVRo9yRYx6f4O8b8ITDnl/Fkl8bfSgPYe+:IxWVeyRYxy4O8b8ITDnl/FksqER+
- TLSH T14A9594E27FE0B615F0F76E31797559BCAA633C619D72828B2283F71E2931660C916313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory