2026-11-07_937fe6331db3888882a759e5f0107391_elex_floxif_smoke-loader_stealc_stop

General

Target
2026-11-07_937fe6331db3888882a759e5f0107391_elex_floxif_smoke-loader_stealc_stop
Size 228KB
Sample261108-mnnfaabv7x
SHA256 e7b0d16fdf07836c5f32572c6809ece877d0c3cdea76d7bc01d5607bdbe9cf4f
MD5 937fe6331db3888882a759e5f0107391
SHA1 3e739da77672d805ee6e71bfc80281d4328436bd
SHA512 5d6b92b00b62da45790540ae99000a2a178c7d24340d60c14acb71bf10bb83f3b212196553df06f737a0c2c52080b6e502d9692a7653e0cd81ca506763bcdb4b
SSDEEP 3072:BGeqSwRob2g8KIZjbLxBRmcMQUug+d2lQBV+UdE+rECWp7hKUk:weU+b2FKihBBV+UdvrEFp7hKp
TLSH
T1CC349D0176C8C3F8E1B6063138796B1549F2BD3D4A3AC99F63421E4E1E3DA84E6B535B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-07_937fe6331db3888882a759e5f0107391_elex_floxif_smoke-loader_stealc_stop

File Explorer

2026-11-07_937fe6331db3888882a759e5f0107391_elex_floxif_smoke-loader_stealc_stop

.exe 228KB

2026-11-07_937fe6331db3888882a759e5f0107391_elex_floxif_smoke-loader_stealc_stop

IMPHASH a150143719dc37175cb9661dd7acda39
SHA256 e7b0d16fdf07836c5f32572c6809ece877d0c3cdea76d7bc01d5607bdbe9cf4f
MD5 937fe6331db3888882a759e5f0107391
SHA1 3e739da77672d805ee6e71bfc80281d4328436bd
SHA512 5d6b92b00b62da45790540ae99000a2a178c7d24340d60c14acb71bf10bb83f3b212196553df06f737a0c2c52080b6e502d9692a7653e0cd81ca506763bcdb4b
SSDEEP 3072:BGeqSwRob2g8KIZjbLxBRmcMQUug+d2lQBV+UdE+rECWp7hKUk:weU+b2FKihBBV+UdvrEFp7hKp
TLSH
T1CC349D0176C8C3F8E1B6063138796B1549F2BD3D4A3AC99F63421E4E1E3DA84E6B535B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

55292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\tools\setupverifier\Release\setupverifier.pdb

kernel32

LoadLibraryA InterlockedExchange SetLastError GetConsoleOutputCP GetSystemDirectoryA SetEndOfFile ReadFile FlushFileBuffers SetStdHandle GetWindowsDirectoryA GetModuleFileNameA GetModuleHandleA CompareStringA ExitThread WaitForSingleObjectEx GetExitCodeProcess GetCurrentProcess FreeLibrary SetErrorMode CreateThread ResumeThread SuspendThread LocalFree GetLastError CloseHandle CreateFileA WriteConsoleA TlsAlloc GetLocalTime HeapFree GetVersionExA HeapAlloc GetProcessHeap TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException EnterCriticalSection LeaveCriticalSection GetACP GetOEMCP LCMapStringA RtlUnwind ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep VirtualAlloc HeapReAlloc HeapSize GetStringTypeA GetLocaleInfoA InitializeCriticalSection SetFilePointer GetConsoleCP GetConsoleMode

user32

GetSystemMenu TranslateMessage PostQuitMessage ShowWindow EnableMenuItem GetDlgItem GetSystemMetrics

advapi32

CloseServiceHandle OpenServiceW OpenSCManagerW RegCloseKey QueryServiceStatus

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-07_937fe6331db3888882a759e5f0107391_elex_floxif_smoke-loader_stealc_stop

kernel32

user32

advapi32

generic