General
- Target 2026-04-15_9b1afd5c8fb63a05a679b362c19fb72c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 949KB
- Sample260415-fbcppaez2p
- SHA256 854c0c7b98e53ee094ec741f7b93e94da822f7f2cc081945b28cf9bf4993b1fe
- MD5 9b1afd5c8fb63a05a679b362c19fb72c
- SHA1 9b7443eb6af81a5a9f00681e9f2ef363d87f0fbe
- SHA512 e754eec85f5d05da24b3480f724c68e81cfacee2dd107cf7a63dbcc31beb4c8fa02f17fd65667bb9879ef49f672be4ec422e8fc90b87a8956d3952dc0f94ea11
- SSDEEP 12288:ZwKfOVRo9yRYkB7B4O8b8ITDnlFX5QGkq3yo8xwdWVOs:ZxWVeyRYkB7B4O8b8ITDnlFXKI3+MEl
- TLSH T19725A43163FD8129F5F377B4A9715EA12EB6FC63DAB4854D224823180BB09A0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_9b1afd5c8fb63a05a679b362c19fb72c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_9b1afd5c8fb63a05a679b362c19fb72c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_9b1afd5c8fb63a05a679b362c19fb72c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 949KB
- SHA256 854c0c7b98e53ee094ec741f7b93e94da822f7f2cc081945b28cf9bf4993b1fe
- MD5 9b1afd5c8fb63a05a679b362c19fb72c
- SHA1 9b7443eb6af81a5a9f00681e9f2ef363d87f0fbe
- SHA512 e754eec85f5d05da24b3480f724c68e81cfacee2dd107cf7a63dbcc31beb4c8fa02f17fd65667bb9879ef49f672be4ec422e8fc90b87a8956d3952dc0f94ea11
- SSDEEP 12288:ZwKfOVRo9yRYkB7B4O8b8ITDnlFX5QGkq3yo8xwdWVOs:ZxWVeyRYkB7B4O8b8ITDnlFXKI3+MEl
- TLSH T19725A43163FD8129F5F377B4A9715EA12EB6FC63DAB4854D224823180BB09A0CD64B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory