2026-10-11_6c94f6b94f6987c1d6763f131275fb8e_elex_smoke-loader_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-11_6c94f6b94f6987c1d6763f131275fb8e_elex_smoke-loader_stealc
Size 3.0MB
Sample261012-xxy89azset
SHA256 4d1d3ecd8adf927d1a615ed89a932911b5a54c09027a33b0bac5a314f2bb0abe
MD5 6c94f6b94f6987c1d6763f131275fb8e
SHA1 3fad33b4dbfdfd32be2b93cf9ead8c2d828617a1
SHA512 0007f08be8f70f1b833b456364d3b032c77ff9699029db7c6d1704c5e5a05ecb2b2f01c3dc632749196c7e0ba69c7a752bf16d0654b7f81fae045e46c9256f45
SSDEEP 49152:fu8nXaHOUer4ov5FjwfpATOUswqhTFxNf82a:m8XauUer4I5F4pACiqhNf82
TLSH
T179E57B22F8408036E9E1127592EDABFA6D2C5631233D78D3E3D15DF41D609E26A3A71F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_6c94f6b94f6987c1d6763f131275fb8e_elex_smoke-loader_stealc

File Explorer

2026-10-11_6c94f6b94f6987c1d6763f131275fb8e_elex_smoke-loader_stealc

.exe 3.0MB

2026-10-11_6c94f6b94f6987c1d6763f131275fb8e_elex_smoke-loader_stealc

IMPHASH e6cb943ad64430868c44b3340d176baa
SHA256 4d1d3ecd8adf927d1a615ed89a932911b5a54c09027a33b0bac5a314f2bb0abe
MD5 6c94f6b94f6987c1d6763f131275fb8e
SHA1 3fad33b4dbfdfd32be2b93cf9ead8c2d828617a1
SHA512 0007f08be8f70f1b833b456364d3b032c77ff9699029db7c6d1704c5e5a05ecb2b2f01c3dc632749196c7e0ba69c7a752bf16d0654b7f81fae045e46c9256f45
SSDEEP 49152:fu8nXaHOUer4ov5FjwfpATOUswqhTFxNf82a:m8XauUer4I5F4pACiqhNf82
TLSH
T179E57B22F8408036E9E1127592EDABFA6D2C5631233D78D3E3D15DF41D609E26A3A71F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2029196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

timeKillEvent auxGetVolume auxGetNumDevs auxGetDevCapsA mciSendCommandA waveOutGetNumDevs waveOutGetDevCapsA waveOutGetVolume timeGetTime

imm32

ImmIsIME

ws2_32

setsockopt connect WSACleanup shutdown WSAWaitForMultipleEvents WSAEnumNetworkEvents recv WSAStartup send htons inet_addr gethostbyname WSAGetLastError socket ioctlsocket WSACreateEvent closesocket WSAEventSelect WSACloseEvent

kernel32

SetStdHandle LoadLibraryW InterlockedExchange GetTickCount lstrcpynA lstrcatA CreateDirectoryA GetPrivateProfileStringA GetPrivateProfileIntA MultiByteToWideChar GetModuleFileNameA CloseHandle WriteFile CreateFileA Sleep GetCurrentProcess SetPriorityClass IsBadReadPtr GetModuleHandleA SetCurrentDirectoryA GetCommandLineA CompareStringA lstrlenA DeleteFileA VirtualFree VirtualAlloc GetCurrentDirectoryA FindClose FindNextFileA FindFirstFileA GetLastError MoveFileExA FlushFileBuffers CompareStringW lstrcmpiA GetProcessTimes GetSystemInfo lstrcpyW _lopen _lread _lwrite _llseek _lclose GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameW HeapCreate GetConsoleMode GetConsoleCP GetDriveTypeW GetCurrentDirectoryW PeekNamedPipe GetFileInformationByHandle GetStringTypeW LCMapStringW SetFilePointer DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount ReadFile GetTimeZoneInformation HeapSize InitializeCriticalSection GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc IsProcessorFeaturePresent SetEnvironmentVariableA WriteConsoleW CreateFileW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess ExitProcess CreateThread GlobalMemoryStatus GetFileAttributesA GetFileSize SetFileAttributesA VirtualQuery SetEndOfFile GetProcessHeap WideCharToMultiByte RaiseException RtlUnwind EncodePointer DecodePointer GetSystemTimeAsFileTime GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA GetFullPathNameA HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection HeapReAlloc HeapSetInformation GetStartupInfoW GetProcAddress GetModuleHandleW

user32

ClientToScreen GetClientRect ShowCursor MessageBoxA wsprintfW GetParent GetWindowRect GetDlgItem InvalidateRect GetWindowDC ReleaseDC LoadCursorA LoadIconA RegisterClassA CreateWindowExA PostQuitMessage BeginPaint EndPaint PostMessageA DefWindowProcA ShowWindow GetWindowLongA OffsetRect SetRect GetSystemMetrics SetWindowPos GetKeyboardLayout GetKeyState GetKeyboardState IsIconic GetForegroundWindow GetAsyncKeyState SetForegroundWindow SetFocus SetWindowTextW SetWindowTextA wsprintfA GetDC PeekMessageA DispatchMessageA TranslateMessage GetMessageA MapVirtualKeyA GetClipboardData SetWindowLongA CloseClipboard OpenClipboard GetDlgItemTextA

gdi32

StretchDIBits SetStretchBltMode GetDeviceCaps DeleteObject CreatePalette SelectPalette RealizePalette GetStockObject

ole32

CoInitialize CoUninitialize

ddraw

DirectDrawCreate

dsound

ord1

comdlg32

GetSaveFileNameA GetOpenFileNameA

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

139KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

431KB

Virtual Size

36.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

224KB

Virtual Size

223KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-11_6c94f6b94f6987c1d6763f131275fb8e_elex_smoke-loader_stealc

winmm

imm32

ws2_32

kernel32

user32

gdi32

ole32

ddraw

dsound

comdlg32

generic