General
- Target 2026-07-08_54b96ff3b5d9d8f78235ea273ce07a8d_elex_smoke-loader_stealc_stop_tofsee
- Size 3.3MB
- Sample260708-wh3gpae16x
- SHA256 ba4d0b57bf087846c393a4e81025b30f250c53922279d6ab5e94fb930aaec0a3
- MD5 54b96ff3b5d9d8f78235ea273ce07a8d
- SHA1 21083c21eb4cab8d25d25e10b0c8a8b83fb92d80
- SHA512 0495519a7ab6d15ea0a14b2b672c3429a0599a02486ce53561542b7c5949263a29c8a485929424bfa232d6c44639af1ae2af27280c925b710deddb92c686faa1
- SSDEEP 49152:58YZGf8YhbxM/6xKF+LWngB7GFM/K2Hwj7:ygGf8YhbuCysWngBSu/He
- TLSH T13AF50623DBF88518E07A9F31D53365600A733C6A87A94A4E0664B53E0DF3B42696773F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_54b96ff3b5d9d8f78235ea273ce07a8d_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_54b96ff3b5d9d8f78235ea273ce07a8d_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_54b96ff3b5d9d8f78235ea273ce07a8d_elex_smoke-loader_stealc_stop_tofsee
- Size 3.3MB
- SHA256 ba4d0b57bf087846c393a4e81025b30f250c53922279d6ab5e94fb930aaec0a3
- MD5 54b96ff3b5d9d8f78235ea273ce07a8d
- SHA1 21083c21eb4cab8d25d25e10b0c8a8b83fb92d80
- SHA512 0495519a7ab6d15ea0a14b2b672c3429a0599a02486ce53561542b7c5949263a29c8a485929424bfa232d6c44639af1ae2af27280c925b710deddb92c686faa1
- SSDEEP 49152:58YZGf8YhbxM/6xKF+LWngB7GFM/K2Hwj7:ygGf8YhbuCysWngBSu/He
- TLSH T13AF50623DBF88518E07A9F31D53365600A733C6A87A94A4E0664B53E0DF3B42696773F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory