General
- Target 2026-04-22_a0ecd573c2c1bd80a4ff7328455ed619_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 669KB
- Sample260422-efppdagw5m
- SHA256 210fdcb575d259cf23fc6892c776346317e75657b46040e46507d8b814322f63
- MD5 a0ecd573c2c1bd80a4ff7328455ed619
- SHA1 1d845e000b27de0100b472976bc5015bd7188c1a
- SHA512 d9c0493a678579e4148f2ec1c18ada0a14122cc4da2bb496150b68c1fa7769c2052fab9c7a8147bfa4702ca7615f507b858a869302bdc2ce6c7e8265356f5875
- SSDEEP 12288:jwKfOVRo9yRYHv4O8b8ITDnlr004EZ+LC:jxWVeyRYP4O8b8ITDnlJKLC
- TLSH T15AE47031B294DA25D5AB3E3489A58EB0EA377C11AEA487CB36403F1D7B717A1DC21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_a0ecd573c2c1bd80a4ff7328455ed619_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_a0ecd573c2c1bd80a4ff7328455ed619_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_a0ecd573c2c1bd80a4ff7328455ed619_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 669KB
- SHA256 210fdcb575d259cf23fc6892c776346317e75657b46040e46507d8b814322f63
- MD5 a0ecd573c2c1bd80a4ff7328455ed619
- SHA1 1d845e000b27de0100b472976bc5015bd7188c1a
- SHA512 d9c0493a678579e4148f2ec1c18ada0a14122cc4da2bb496150b68c1fa7769c2052fab9c7a8147bfa4702ca7615f507b858a869302bdc2ce6c7e8265356f5875
- SSDEEP 12288:jwKfOVRo9yRYHv4O8b8ITDnlr004EZ+LC:jxWVeyRYP4O8b8ITDnlJKLC
- TLSH T15AE47031B294DA25D5AB3E3489A58EB0EA377C11AEA487CB36403F1D7B717A1DC21317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory