General
- Target 2026-09-10_fabc3cb4cb0bbea6c9093cb37a7b2a54_elex_smoke-loader_stealc_stop_tofsee
- Size 945KB
- Sample260910-kfq54azhna
- SHA256 c13d85f68d781beee4e84608fdcfe6b98bd9ffacc8b2a4f0d26630b41b513d6f
- MD5 fabc3cb4cb0bbea6c9093cb37a7b2a54
- SHA1 532206b76558f74a5843b1175213106b23792a28
- SHA512 d61775263578ef7360ac1b73a7d6df759aa8571b835f09d2839fd22da5c9a38187c8f0b170ad9d2772daa412aa6f809c4c1619fa4c871d01e688a37feaaed52e
- SSDEEP 12288:ewKfOVRo9yRYzo7TIGLUh7Wk/L40r/9Iqd:exWVeyRYKTIG8BT5nd
- TLSH T1DA251901F294D926E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_fabc3cb4cb0bbea6c9093cb37a7b2a54_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_fabc3cb4cb0bbea6c9093cb37a7b2a54_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_fabc3cb4cb0bbea6c9093cb37a7b2a54_elex_smoke-loader_stealc_stop_tofsee
- Size 945KB
- SHA256 c13d85f68d781beee4e84608fdcfe6b98bd9ffacc8b2a4f0d26630b41b513d6f
- MD5 fabc3cb4cb0bbea6c9093cb37a7b2a54
- SHA1 532206b76558f74a5843b1175213106b23792a28
- SHA512 d61775263578ef7360ac1b73a7d6df759aa8571b835f09d2839fd22da5c9a38187c8f0b170ad9d2772daa412aa6f809c4c1619fa4c871d01e688a37feaaed52e
- SSDEEP 12288:ewKfOVRo9yRYzo7TIGLUh7Wk/L40r/9Iqd:exWVeyRYKTIG8BT5nd
- TLSH T1DA251901F294D926E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory