General
- Target 2026-07-31_8c56886fcf766b8a07e559b5b52cb9c9_elex_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260731-3k8vtashpd
- SHA256 7583b56e211d4fc30e2456987f40d3bd5cd15bf92b1884762449fe48c54c7298
- MD5 8c56886fcf766b8a07e559b5b52cb9c9
- SHA1 384017f31adeea8ea58aa9be7102906a2ab67a8d
- SHA512 f04390102d45a758ab66d86c9b95b11ca234add31d9c8e2dc449b4c22672fb66c91d1960afc9d0293c888371ceecf99ea6a014878c92e57c612d2aa16d70ce21
- SSDEEP 12288:cwKfOVRo9yRYIox9+Q0BUsvFFkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk7:cxWVeyRYBxgIQNxb9
- TLSH T156853815FFFDC045F6B76670DC7256A10A62BC12FE74851E72483B4EEAB0B418826B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8c56886fcf766b8a07e559b5b52cb9c9_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_8c56886fcf766b8a07e559b5b52cb9c9_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8c56886fcf766b8a07e559b5b52cb9c9_elex_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 7583b56e211d4fc30e2456987f40d3bd5cd15bf92b1884762449fe48c54c7298
- MD5 8c56886fcf766b8a07e559b5b52cb9c9
- SHA1 384017f31adeea8ea58aa9be7102906a2ab67a8d
- SHA512 f04390102d45a758ab66d86c9b95b11ca234add31d9c8e2dc449b4c22672fb66c91d1960afc9d0293c888371ceecf99ea6a014878c92e57c612d2aa16d70ce21
- SSDEEP 12288:cwKfOVRo9yRYIox9+Q0BUsvFFkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk7:cxWVeyRYBxgIQNxb9
- TLSH T156853815FFFDC045F6B76670DC7256A10A62BC12FE74851E72483B4EEAB0B418826B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory