General
- Target 2026-04-22_cb92c8672f6536085cee864d42ce392b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 877KB
- Sample260422-eq4laagy2m
- SHA256 09aa1463fbf4d2f6cbf62182c2830bb9b0a37537924ddef55924fbae6ab66be4
- MD5 cb92c8672f6536085cee864d42ce392b
- SHA1 fe5663893f43ed1ef5eb07a009de624e2d6c1c30
- SHA512 1cc0ab4c3e87f1dde7e942c25f2041c97dfbdeb7f72188152cfc6c6a6247167a4b475788c34441d53f41c0cb0d8e0d61626587f13da523f473d6abb734413fd5
- SSDEEP 12288:1wKfOVRo9yRYEz4O8b8ITDnljFF0eD9DwYWEqI:1xWVeyRYEz4O8b8ITDnljFX
- TLSH T15115D821B2E5C025E4B63B344D778EB43A26BC216EB5C64F37543B1E6F716A0DD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-22_cb92c8672f6536085cee864d42ce392b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-22_cb92c8672f6536085cee864d42ce392b_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-22_cb92c8672f6536085cee864d42ce392b_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 877KB
- SHA256 09aa1463fbf4d2f6cbf62182c2830bb9b0a37537924ddef55924fbae6ab66be4
- MD5 cb92c8672f6536085cee864d42ce392b
- SHA1 fe5663893f43ed1ef5eb07a009de624e2d6c1c30
- SHA512 1cc0ab4c3e87f1dde7e942c25f2041c97dfbdeb7f72188152cfc6c6a6247167a4b475788c34441d53f41c0cb0d8e0d61626587f13da523f473d6abb734413fd5
- SSDEEP 12288:1wKfOVRo9yRYEz4O8b8ITDnljFF0eD9DwYWEqI:1xWVeyRYEz4O8b8ITDnljFX
- TLSH T15115D821B2E5C025E4B63B344D778EB43A26BC216EB5C64F37543B1E6F716A0DD2132A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory