General
- Target 2026-07-20_a32d643f17123d0f43fd3206d3b62a20_elex_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- Sample260720-xqyddacv4j
- SHA256 efd5dca14695bec0bf22c277c4695fa4230b92df2fd5864eb37f4c9b5dd5f78f
- MD5 a32d643f17123d0f43fd3206d3b62a20
- SHA1 131c81f1d3c14cad20121cef4db5eab36612dc0b
- SHA512 5cef8931ac5b46cf832024ccd9a45a4c2e4c3e97499133074ff5a0c7936411368948168f600b627036c0d03a4a89e128fb389a7c3707cf0b9832f31476e35ee9
- SSDEEP 12288:awKfOVRo9yRYeSRbtnhEfUiTvBwzozt0YeQib4IkQWbTqWLsWAI:axWVeyRY9RzaNwzozv6I
- TLSH T18475C93173F5C125F3F767309C7687A60A77BC62AE34E21E2244322C4C717A1AA65B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_a32d643f17123d0f43fd3206d3b62a20_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_a32d643f17123d0f43fd3206d3b62a20_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_a32d643f17123d0f43fd3206d3b62a20_elex_smoke-loader_stealc_stop_tofsee
- Size 1.5MB
- SHA256 efd5dca14695bec0bf22c277c4695fa4230b92df2fd5864eb37f4c9b5dd5f78f
- MD5 a32d643f17123d0f43fd3206d3b62a20
- SHA1 131c81f1d3c14cad20121cef4db5eab36612dc0b
- SHA512 5cef8931ac5b46cf832024ccd9a45a4c2e4c3e97499133074ff5a0c7936411368948168f600b627036c0d03a4a89e128fb389a7c3707cf0b9832f31476e35ee9
- SSDEEP 12288:awKfOVRo9yRYeSRbtnhEfUiTvBwzozt0YeQib4IkQWbTqWLsWAI:axWVeyRY9RzaNwzozv6I
- TLSH T18475C93173F5C125F3F767309C7687A60A77BC62AE34E21E2244322C4C717A1AA65B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory