General
- Target 2026-04-17_261bfad14b87166e852e66557bca06a9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 779KB
- Sample260417-seqryacz9y
- SHA256 7087ee6dd31d7009b7eed507549159b4fa14f309f906987ea69938de051719eb
- MD5 261bfad14b87166e852e66557bca06a9
- SHA1 0de948a9edbdb0b4a04ee0086b1e2a2ab0383eb3
- SHA512 c12452ce2feef9329cd37cb83311248266fbbeb1c308b3a7fc0aed041ba647ec935bd00010f1a705a8405554dad6e2796f2aa045eba875d9ff2e60d591b7c499
- SSDEEP 12288:uwKfOVRo9yRYYkl24O8b8ITDnlL0aiVk+N:uxWVeyRYYI24O8b8ITDnlC
- TLSH T1E3050731B2D4D025E4A23A344DBA8EF47A25BC116FF18B8B76483B5E6F316B1DD21316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_261bfad14b87166e852e66557bca06a9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_261bfad14b87166e852e66557bca06a9_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_261bfad14b87166e852e66557bca06a9_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 779KB
- SHA256 7087ee6dd31d7009b7eed507549159b4fa14f309f906987ea69938de051719eb
- MD5 261bfad14b87166e852e66557bca06a9
- SHA1 0de948a9edbdb0b4a04ee0086b1e2a2ab0383eb3
- SHA512 c12452ce2feef9329cd37cb83311248266fbbeb1c308b3a7fc0aed041ba647ec935bd00010f1a705a8405554dad6e2796f2aa045eba875d9ff2e60d591b7c499
- SSDEEP 12288:uwKfOVRo9yRYYkl24O8b8ITDnlL0aiVk+N:uxWVeyRYYI24O8b8ITDnlC
- TLSH T1E3050731B2D4D025E4A23A344DBA8EF47A25BC116FF18B8B76483B5E6F316B1DD21316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory