General
- Target 2026-07-08_45cd0289f8b864f48ed610b3d97a6230_elex_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- Sample260708-c786zsaw9l
- SHA256 6f7b84baf00704c7836c397a05bacbbdcd4dfcd226d5d7da693f5c45e3641c14
- MD5 45cd0289f8b864f48ed610b3d97a6230
- SHA1 99855d2b9db31b05ef6d84a705ec0e4dc8a2360a
- SHA512 3a06801964619ff592a934ce70561072da597e226cd4a8be6ffe829a80dbc5edac1f64a016e11585cd231ada35bcac3ddaf2ca80a49343bdf77436ac2a862d2b
- SSDEEP 24576:SxWVeyRYX+glFXQukLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbFyKfi2KxOqo:S8Y5lFgukLHkJkv4f4v9lbFzfgZoR
- TLSH T1DF060801ABFD4684F0F76B756DB152545F35BD62BF32C21F2A88351E9972B808D22B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_45cd0289f8b864f48ed610b3d97a6230_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-08_45cd0289f8b864f48ed610b3d97a6230_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-08_45cd0289f8b864f48ed610b3d97a6230_elex_smoke-loader_stealc_stop_tofsee
- Size 3.8MB
- SHA256 6f7b84baf00704c7836c397a05bacbbdcd4dfcd226d5d7da693f5c45e3641c14
- MD5 45cd0289f8b864f48ed610b3d97a6230
- SHA1 99855d2b9db31b05ef6d84a705ec0e4dc8a2360a
- SHA512 3a06801964619ff592a934ce70561072da597e226cd4a8be6ffe829a80dbc5edac1f64a016e11585cd231ada35bcac3ddaf2ca80a49343bdf77436ac2a862d2b
- SSDEEP 24576:SxWVeyRYX+glFXQukLHgZpJkvQ/vk4agWs8yKFMiX8nb4Udn89nlbFyKfi2KxOqo:S8Y5lFgukLHkJkv4f4v9lbFzfgZoR
- TLSH T1DF060801ABFD4684F0F76B756DB152545F35BD62BF32C21F2A88351E9972B808D22B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1