General
- Target 2026-08-11_f1aa4aa64f183ac71cbd5562214ec02a_elex_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- Sample260811-yte7msgd92
- SHA256 862c88f4a4c92167c0204f9bb4de53085c9317ca666c46bb7e0cecc61fb9e5ea
- MD5 f1aa4aa64f183ac71cbd5562214ec02a
- SHA1 c9d23bdf40822a5bc68b32403da979dcda21ee69
- SHA512 22512fbfbd68d9f4f5d67c0ad5bd4e0912d57643e3260994834e840db95f9e4bac62007d0bfc6fa89e24d5dd693c7289d5c24db4405348c8822c3b59bd65f226
- SSDEEP 24576:uxWVeyRYGdJ1xTVIlz7X9zOo4PjnikEpx/nLWvJDT:u8YGd5SR7Xgo4TiRPnLWvJP
- TLSH T1A775D012B2D0C021D4A327384E6FC7B95A26BD166FE0D69B77447F5EAC316C1B92433A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_f1aa4aa64f183ac71cbd5562214ec02a_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_f1aa4aa64f183ac71cbd5562214ec02a_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_f1aa4aa64f183ac71cbd5562214ec02a_elex_smoke-loader_stealc_stop_tofsee
- Size 1.6MB
- SHA256 862c88f4a4c92167c0204f9bb4de53085c9317ca666c46bb7e0cecc61fb9e5ea
- MD5 f1aa4aa64f183ac71cbd5562214ec02a
- SHA1 c9d23bdf40822a5bc68b32403da979dcda21ee69
- SHA512 22512fbfbd68d9f4f5d67c0ad5bd4e0912d57643e3260994834e840db95f9e4bac62007d0bfc6fa89e24d5dd693c7289d5c24db4405348c8822c3b59bd65f226
- SSDEEP 24576:uxWVeyRYGdJ1xTVIlz7X9zOo4PjnikEpx/nLWvJDT:u8YGd5SR7Xgo4TiRPnLWvJP
- TLSH T1A775D012B2D0C021D4A327384E6FC7B95A26BD166FE0D69B77447F5EAC316C1B92433A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory