General
- Target 2026-07-06_540070e6a12d338754693ba40c7ee8db_elex_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- Sample260707-ecdspshs5x
- SHA256 81db8c4d52cf3b492eba27b0afc32d2febdffe44aa504ba3f67caa79452634d5
- MD5 540070e6a12d338754693ba40c7ee8db
- SHA1 a5960e04e04aa40f58ebdf47c49aec8a43eee1aa
- SHA512 6bd73ad548ec190c09ed5c5274f75adabf159b4bde1a0fcea27a11f9cc3316ae16794b1c62e320ec6c1e054aac364eeb2fb6dee834922a1e5c191e14b3fd7883
- SSDEEP 24576:sxWVeyRYWxE1xTVIlz7X9zOo4PjnikEpx/nLWvJyv:s8Yc+SR7Xgo4TiRPnLWvJ+
- TLSH T192B52931A3F48614F3F73B306D7A86A10A77BC66AEB8E25E5240352E5C70751B921B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_540070e6a12d338754693ba40c7ee8db_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-06_540070e6a12d338754693ba40c7ee8db_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-06_540070e6a12d338754693ba40c7ee8db_elex_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- SHA256 81db8c4d52cf3b492eba27b0afc32d2febdffe44aa504ba3f67caa79452634d5
- MD5 540070e6a12d338754693ba40c7ee8db
- SHA1 a5960e04e04aa40f58ebdf47c49aec8a43eee1aa
- SHA512 6bd73ad548ec190c09ed5c5274f75adabf159b4bde1a0fcea27a11f9cc3316ae16794b1c62e320ec6c1e054aac364eeb2fb6dee834922a1e5c191e14b3fd7883
- SSDEEP 24576:sxWVeyRYWxE1xTVIlz7X9zOo4PjnikEpx/nLWvJyv:s8Yc+SR7Xgo4TiRPnLWvJ+
- TLSH T192B52931A3F48614F3F73B306D7A86A10A77BC66AEB8E25E5240352E5C70751B921B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1