General
- Target 2026-06-01_6fc409965de5c3be926b4c8e2b14e396_elex_smoke-loader_stop
- Size 1.7MB
- Sample260601-2p79eagw2s
- SHA256 e24696d4f6e98312da6e6173db8cdabde94d6f6657a2a231cfdc10fc75760dd5
- MD5 6fc409965de5c3be926b4c8e2b14e396
- SHA1 0795f9bb579bef252120b8dd28a32a9b4a9d8590
- SHA512 61cd7eb205eb6c40bbc0a708ca6001d7bff37de7bcd7f565b38b44eed3e1e885c51284812274834cd6e410aa7344a7d96f28d3c5a17e841b852b4110d594d0bf
- SSDEEP 49152:mS1YTuq9qE0S/IfLYmjfAko2Lj6kxs0rdhTlP:JIq0cZfAko23PV
- TLSH T1AE857C21A780C537FAE304B4D969456D1D7A3E329F25E1CBA3C8BE4F1AB15C2A631713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_6fc409965de5c3be926b4c8e2b14e396_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_6fc409965de5c3be926b4c8e2b14e396_elex_smoke-loader_stop.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_6fc409965de5c3be926b4c8e2b14e396_elex_smoke-loader_stop
- Size 1.7MB
- SHA256 e24696d4f6e98312da6e6173db8cdabde94d6f6657a2a231cfdc10fc75760dd5
- MD5 6fc409965de5c3be926b4c8e2b14e396
- SHA1 0795f9bb579bef252120b8dd28a32a9b4a9d8590
- SHA512 61cd7eb205eb6c40bbc0a708ca6001d7bff37de7bcd7f565b38b44eed3e1e885c51284812274834cd6e410aa7344a7d96f28d3c5a17e841b852b4110d594d0bf
- SSDEEP 49152:mS1YTuq9qE0S/IfLYmjfAko2Lj6kxs0rdhTlP:JIq0cZfAko23PV
- TLSH T1AE857C21A780C537FAE304B4D969456D1D7A3E329F25E1CBA3C8BE4F1AB15C2A631713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory