General
- Target 2026-04-20_b4d0c656ebc6b696d8702caff959c2ca_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- Sample260420-relmjsgt9s
- SHA256 9f54e492282f5e2f81bbaef3bedaee74fdf435a73e1879bbfebbb260ea35c3cb
- MD5 b4d0c656ebc6b696d8702caff959c2ca
- SHA1 9f4d97794dc5e2bf0ccbcab9997fc9318da564b2
- SHA512 da7c7d746af1791a34fcf200f942d4cccfa8a3b283cdefb5106abbff8faa8d221f877edfb0b34268ce85ee1381527b0729ab9f0686fbc47d0eaeca1be5befb2c
- SSDEEP 49152:j8Ynx4O8b8ITDnljFpESR7Xgo4TiRPnLWvJo:wo+3R7Xn4TiRCvJo
- TLSH T153A59E2272E4C015E4B73734597B8EA43A26BC116FF5965B37483B1E6F316A0FD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_b4d0c656ebc6b696d8702caff959c2ca_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_b4d0c656ebc6b696d8702caff959c2ca_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_b4d0c656ebc6b696d8702caff959c2ca_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 2.0MB
- SHA256 9f54e492282f5e2f81bbaef3bedaee74fdf435a73e1879bbfebbb260ea35c3cb
- MD5 b4d0c656ebc6b696d8702caff959c2ca
- SHA1 9f4d97794dc5e2bf0ccbcab9997fc9318da564b2
- SHA512 da7c7d746af1791a34fcf200f942d4cccfa8a3b283cdefb5106abbff8faa8d221f877edfb0b34268ce85ee1381527b0729ab9f0686fbc47d0eaeca1be5befb2c
- SSDEEP 49152:j8Ynx4O8b8ITDnljFpESR7Xgo4TiRPnLWvJo:wo+3R7Xn4TiRCvJo
- TLSH T153A59E2272E4C015E4B73734597B8EA43A26BC116FF5965B37483B1E6F316A0FD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory