General
- Target 2026-10-22_91caf1f6de74f22e1b4b9c1f6a3287d6_elex_smoke-loader_stealc_stop_tofsee
- Size 940KB
- Sample261024-fa28ysw19m
- SHA256 78afba4d815c5d9a7795ae8c9547252534be5f3d279e72c8a5e7f1dab56484c9
- MD5 91caf1f6de74f22e1b4b9c1f6a3287d6
- SHA1 29886a6cb0fabb9feb86b4fea14c36fc84c1f073
- SHA512 4a80f5bcc58d3f99bed00569bccd8927d1e943444d2883e746725ad2524d38c8312afdeeec8cce3e361d996ed49d8044706fa2d005e372b46bfb0fe6568da0c3
- SSDEEP 12288:ewKfOVRo9yRYJ+C0D5wFyJS/INFOd5Klwc:exWVeyRY8
- TLSH T1D9252E1376A48037E5A2EA34597A86BD0A257C5DDE339E4F66403FCDFBF16818920336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_91caf1f6de74f22e1b4b9c1f6a3287d6_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_91caf1f6de74f22e1b4b9c1f6a3287d6_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_91caf1f6de74f22e1b4b9c1f6a3287d6_elex_smoke-loader_stealc_stop_tofsee
- Size 940KB
- SHA256 78afba4d815c5d9a7795ae8c9547252534be5f3d279e72c8a5e7f1dab56484c9
- MD5 91caf1f6de74f22e1b4b9c1f6a3287d6
- SHA1 29886a6cb0fabb9feb86b4fea14c36fc84c1f073
- SHA512 4a80f5bcc58d3f99bed00569bccd8927d1e943444d2883e746725ad2524d38c8312afdeeec8cce3e361d996ed49d8044706fa2d005e372b46bfb0fe6568da0c3
- SSDEEP 12288:ewKfOVRo9yRYJ+C0D5wFyJS/INFOd5Klwc:exWVeyRY8
- TLSH T1D9252E1376A48037E5A2EA34597A86BD0A257C5DDE339E4F66403FCDFBF16818920336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory