General
- Target 2026-04-15_85545cd925a2a8ab8ffe87049892b36e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 987KB
- Sample260415-evpb6aev6k
- SHA256 8008f0cea1a49d5131d52bfdf558fbd49767bd53db5a231698c216f0364bfa8c
- MD5 85545cd925a2a8ab8ffe87049892b36e
- SHA1 03d7d5fea8a4cdd603143152e06586fd2ed2c482
- SHA512 13d890d9dbe4b2f6458118d8c5a33b0b70f967514e8cda8db6c921736e0ae92fff1cb9bc0ef8393c3685f292e2608672b210aa72acf61093f7c1206c451b77a6
- SSDEEP 24576:MxWVeyRYyqwzYDteYIpLPLmC4O8b8ITDnlaku:M8YOt4O8b8ITDnlDu
- TLSH T170259262B3E08E11F1BBAE3044796D66262BBD515EA143CF22583F4E7E71360EE25713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_85545cd925a2a8ab8ffe87049892b36e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_85545cd925a2a8ab8ffe87049892b36e_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_85545cd925a2a8ab8ffe87049892b36e_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 987KB
- SHA256 8008f0cea1a49d5131d52bfdf558fbd49767bd53db5a231698c216f0364bfa8c
- MD5 85545cd925a2a8ab8ffe87049892b36e
- SHA1 03d7d5fea8a4cdd603143152e06586fd2ed2c482
- SHA512 13d890d9dbe4b2f6458118d8c5a33b0b70f967514e8cda8db6c921736e0ae92fff1cb9bc0ef8393c3685f292e2608672b210aa72acf61093f7c1206c451b77a6
- SSDEEP 24576:MxWVeyRYyqwzYDteYIpLPLmC4O8b8ITDnlaku:M8YOt4O8b8ITDnlDu
- TLSH T170259262B3E08E11F1BBAE3044796D66262BBD515EA143CF22583F4E7E71360EE25713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory