General
- Target 2026-09-04_5488152218eb57ff54c7891e229038ba_coinminer_elex_redline-stealer_smoke-loader_stealc_stop_tofsee
- Size 381KB
- Sample260905-mlkxdaaq2s
- SHA256 0e183a3af413c3e257a6006e7b00f8f192709ffa9c9b17128ca958be88491606
- MD5 5488152218eb57ff54c7891e229038ba
- SHA1 d185ee143f6c985f242f1d04d28dc3845c7627f6
- SHA512 12522b84035bfa95c43ed415877f563a56ed24b3c295e4bf1a69ffe5cffeb066ad92b52e6766dc98fc9995aaea5966398b46f3b461f8b8dd0acf8a1027630d22
- SSDEEP 6144:+4+RGyUDitrl0Mdq0JSlv2TBRqu0m4SAB+xKS:vIGmtryMdq0JSlv2TGuP4S0S
- TLSH T1C6844C71F34181B0DC6607B505F6DE351E1BBCB98774449B26CC3AAA3EB13E2153A98B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_5488152218eb57ff54c7891e229038ba_coinminer_elex_redline-stealer_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_5488152218eb57ff54c7891e229038ba_coinminer_elex_redline-stealer_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_5488152218eb57ff54c7891e229038ba_coinminer_elex_redline-stealer_smoke-loader_stealc_stop_tofsee
- Size 381KB
- SHA256 0e183a3af413c3e257a6006e7b00f8f192709ffa9c9b17128ca958be88491606
- MD5 5488152218eb57ff54c7891e229038ba
- SHA1 d185ee143f6c985f242f1d04d28dc3845c7627f6
- SHA512 12522b84035bfa95c43ed415877f563a56ed24b3c295e4bf1a69ffe5cffeb066ad92b52e6766dc98fc9995aaea5966398b46f3b461f8b8dd0acf8a1027630d22
- SSDEEP 6144:+4+RGyUDitrl0Mdq0JSlv2TBRqu0m4SAB+xKS:vIGmtryMdq0JSlv2TGuP4S0S
- TLSH T1C6844C71F34181B0DC6607B505F6DE351E1BBCB98774449B26CC3AAA3EB13E2153A98B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks whether UAC is enabled