General
- Target 2026-07-08_af8e32ad1f688592244f9868d9f50232_elex_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- Sample260708-vnd6lset2y
- SHA256 ecb3128d5af05d88024ec871085dad1e1771765e96a11c88583c94747fd290c0
- MD5 af8e32ad1f688592244f9868d9f50232
- SHA1 9a07d6422224c75fb9e0a61922a8d429d6b2fec3
- SHA512 69aede3f97fad219304c548c39af55ced6a24c6e52a54d6199c82b21abcd9441662c3417a2627d6ad0497dda400fdea57dfa7ae7d7d92f49049f59a5efb55333
- SSDEEP 24576:+xWVeyRYnHDXfBxrj3d5E/jKQvVj4YpdjYY0td7kt+XWn3BCc2AEQq/rxXv:+8YTBxrj3O2A3S9v
- TLSH T1E7A5B401AFFD8B45F1BB6B709D7556A00A677C52BE74C79E61843E0EFA70B408922723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-08_af8e32ad1f688592244f9868d9f50232_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-08_af8e32ad1f688592244f9868d9f50232_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target 2026-07-08_af8e32ad1f688592244f9868d9f50232_elex_smoke-loader_stealc_stop_tofsee
- Size 2.1MB
- SHA256 ecb3128d5af05d88024ec871085dad1e1771765e96a11c88583c94747fd290c0
- MD5 af8e32ad1f688592244f9868d9f50232
- SHA1 9a07d6422224c75fb9e0a61922a8d429d6b2fec3
- SHA512 69aede3f97fad219304c548c39af55ced6a24c6e52a54d6199c82b21abcd9441662c3417a2627d6ad0497dda400fdea57dfa7ae7d7d92f49049f59a5efb55333
- SSDEEP 24576:+xWVeyRYnHDXfBxrj3d5E/jKQvVj4YpdjYY0td7kt+XWn3BCc2AEQq/rxXv:+8YTBxrj3O2A3S9v
- TLSH T1E7A5B401AFFD8B45F1BB6B709D7556A00A677C52BE74C79E61843E0EFA70B408922723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1