General
- Target 2026-07-06_8decb8ea7712fe2b7256a96b832b9ed0_elex_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260707-cttjdac16p
- SHA256 9528df35aede5ea37ad7cf7665b9e0ddc9b1122cc953ca2217346b87e92d77d9
- MD5 8decb8ea7712fe2b7256a96b832b9ed0
- SHA1 e4985eb9228fae9c7e34ec71c90f3aa4abfb3b61
- SHA512 36abb885603ad971f9d164df87670b772a7058ab5d763e3540e4ae01f60919d8aa8f6e0b3c6efefc7f11b275e2217a3e22e311149ebbf96aaffa1c25d5c4f3b4
- SSDEEP 12288:BwKfOVRo9yRYNtIGLUh7Wk/L80dag2mfVw0XqTl1pOyJS/INFOdoNKuQIW1oEJkh:BxWVeyRYrIG8BTqmiXTl1Chm
- TLSH T13585C533B2E4D227F6F7EF30997942B1CA777C5DAE34A24E3244362C59707A09964722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_8decb8ea7712fe2b7256a96b832b9ed0_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-06_8decb8ea7712fe2b7256a96b832b9ed0_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-06_8decb8ea7712fe2b7256a96b832b9ed0_elex_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 9528df35aede5ea37ad7cf7665b9e0ddc9b1122cc953ca2217346b87e92d77d9
- MD5 8decb8ea7712fe2b7256a96b832b9ed0
- SHA1 e4985eb9228fae9c7e34ec71c90f3aa4abfb3b61
- SHA512 36abb885603ad971f9d164df87670b772a7058ab5d763e3540e4ae01f60919d8aa8f6e0b3c6efefc7f11b275e2217a3e22e311149ebbf96aaffa1c25d5c4f3b4
- SSDEEP 12288:BwKfOVRo9yRYNtIGLUh7Wk/L80dag2mfVw0XqTl1pOyJS/INFOdoNKuQIW1oEJkh:BxWVeyRYrIG8BTqmiXTl1Chm
- TLSH T13585C533B2E4D227F6F7EF30997942B1CA777C5DAE34A24E3244362C59707A09964722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1