General
- Target 2026-04-22_ff911d3bb14924d3ac78abd566079e50_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 918KB
- Sample260422-e7y25acz4v
- SHA256 0218a99e2eb0226141c76e9bdfb33b9e927710fa56f5875fce4006b0c2e1e2cd
- MD5 ff911d3bb14924d3ac78abd566079e50
- SHA1 527daeab2e32e0bcaaa04eb32a88446d67c844df
- SHA512 a832dacbfbac06b128efb731e6f68d84e00884eb0457d94e7907b7c202d3a77ba3009997fd186cfaea65ea3abaa7476b3eaebc71b35b6ed0e01a1ca069e7adb4
- SSDEEP 12288:XwKfOVRo9yRYV5z4O8b8ITDnljFF0ERD+DZ2vEqA:XxWVeyRYnz4O8b8ITDnljFU
- TLSH T10A15F921B2E5C025E4B63B348D768EB43A26BC116EB5C64F37543B1E6F716B0DD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_ff911d3bb14924d3ac78abd566079e50_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_ff911d3bb14924d3ac78abd566079e50_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_ff911d3bb14924d3ac78abd566079e50_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 918KB
- SHA256 0218a99e2eb0226141c76e9bdfb33b9e927710fa56f5875fce4006b0c2e1e2cd
- MD5 ff911d3bb14924d3ac78abd566079e50
- SHA1 527daeab2e32e0bcaaa04eb32a88446d67c844df
- SHA512 a832dacbfbac06b128efb731e6f68d84e00884eb0457d94e7907b7c202d3a77ba3009997fd186cfaea65ea3abaa7476b3eaebc71b35b6ed0e01a1ca069e7adb4
- SSDEEP 12288:XwKfOVRo9yRYV5z4O8b8ITDnljFF0ERD+DZ2vEqA:XxWVeyRYnz4O8b8ITDnljFU
- TLSH T10A15F921B2E5C025E4B63B348D768EB43A26BC116EB5C64F37543B1E6F716B0DD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory