General
- Target 2026-07-08_f51737d5f9025f3f9726f29f87e6cd84_elex_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- Sample260708-tx9s7sct7m
- SHA256 619199f12c3bdb40191a7635143e63399f8b6fe8c393fddad1b431058768c9d6
- MD5 f51737d5f9025f3f9726f29f87e6cd84
- SHA1 d2bc7db300d0a4fab714c744bf6fc9b6d9c92c4e
- SHA512 8f523337a35b667efe249c3b9c08573077ef58d027e857f3601d091ba077e160586117cddcb803fc6af32d3641bebb78405a96b7828825b58ce5de3c54c1be60
- SSDEEP 12288:JwKfOVRo9yRYELm20idyJS/INFOdtKcBscysVi:JxWVeyRYELm7/
- TLSH T1CA457143B3E4C917F1B7DF30497969760A3ABD5E6D35828F32583A4E6C71780EA24722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_f51737d5f9025f3f9726f29f87e6cd84_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-08_f51737d5f9025f3f9726f29f87e6cd84_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-08_f51737d5f9025f3f9726f29f87e6cd84_elex_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 619199f12c3bdb40191a7635143e63399f8b6fe8c393fddad1b431058768c9d6
- MD5 f51737d5f9025f3f9726f29f87e6cd84
- SHA1 d2bc7db300d0a4fab714c744bf6fc9b6d9c92c4e
- SHA512 8f523337a35b667efe249c3b9c08573077ef58d027e857f3601d091ba077e160586117cddcb803fc6af32d3641bebb78405a96b7828825b58ce5de3c54c1be60
- SSDEEP 12288:JwKfOVRo9yRYELm20idyJS/INFOdtKcBscysVi:JxWVeyRYELm7/
- TLSH T1CA457143B3E4C917F1B7DF30497969760A3ABD5E6D35828F32583A4E6C71780EA24722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1