General
- Target 2026-04-22_930c4e80c4c87933d200ccfb2f798c6c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 669KB
- Sample260422-ecnb5sgv9l
- SHA256 0494a34c01bf664e3647a00ad9d9a8e5f0aa3dbec3cf3259aaf94933dd4a6de9
- MD5 930c4e80c4c87933d200ccfb2f798c6c
- SHA1 5cbfc5e11bcc5366fdc7b9ad0e0237065e0b3bec
- SHA512 6cf081b053cecdf0aa22ec2307057c241fc0b4c5e2d0a0f13a055a7c2324052a331eaa24bcb9a618aef7ce81b4ab4471beb1b6ec84a77a5b30585e9b2d54b987
- SSDEEP 6144:jwynAtMrOVRkidy9yIGWlUiHE4O8b8ITDnlznZ5QJUEf84EZLaLx:jwKfOVRo9yRYS4O8b8ITDnlr004EZ+Lx
- TLSH T127E47031B294DA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DC21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_930c4e80c4c87933d200ccfb2f798c6c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_930c4e80c4c87933d200ccfb2f798c6c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_930c4e80c4c87933d200ccfb2f798c6c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 669KB
- SHA256 0494a34c01bf664e3647a00ad9d9a8e5f0aa3dbec3cf3259aaf94933dd4a6de9
- MD5 930c4e80c4c87933d200ccfb2f798c6c
- SHA1 5cbfc5e11bcc5366fdc7b9ad0e0237065e0b3bec
- SHA512 6cf081b053cecdf0aa22ec2307057c241fc0b4c5e2d0a0f13a055a7c2324052a331eaa24bcb9a618aef7ce81b4ab4471beb1b6ec84a77a5b30585e9b2d54b987
- SSDEEP 6144:jwynAtMrOVRkidy9yIGWlUiHE4O8b8ITDnlznZ5QJUEf84EZLaLx:jwKfOVRo9yRYS4O8b8ITDnlr004EZ+Lx
- TLSH T127E47031B294DA25D5AB3E3489A58EB0EA377C11AEA487CB36403F0D7B717A1DC21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory