General

  • Target

    2025-04-12_060029c8c2aca9ed45367e412b298557_amadey_elex_mafia_smoke-loader

  • Size

    1.6MB

  • Sample

    250412-3xt77atn17

  • MD5

    060029c8c2aca9ed45367e412b298557

  • SHA1

    85d5f41f531e65d8435dde3bf7f2fe6d19412f9e

  • SHA256

    c9c0e8c7ef86cf19ac93b4d5742aeb666c815e6dfdb5585e4b87b1dfb5bf56c1

  • SHA512

    e2a3322bf729a7d8cb61b958a39c3320436ff872e91df0cd36b112cf210ac42288445a582ae3b8de9008cfbb3fb7641ad92b724a05cf4066baa9f101a2a91f91

  • SSDEEP

    24576:YvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:YHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4

Score
7/10

Malware Config

Targets

    • Target

      2025-04-12_060029c8c2aca9ed45367e412b298557_amadey_elex_mafia_smoke-loader

    • Size

      1.6MB

    • MD5

      060029c8c2aca9ed45367e412b298557

    • SHA1

      85d5f41f531e65d8435dde3bf7f2fe6d19412f9e

    • SHA256

      c9c0e8c7ef86cf19ac93b4d5742aeb666c815e6dfdb5585e4b87b1dfb5bf56c1

    • SHA512

      e2a3322bf729a7d8cb61b958a39c3320436ff872e91df0cd36b112cf210ac42288445a582ae3b8de9008cfbb3fb7641ad92b724a05cf4066baa9f101a2a91f91

    • SSDEEP

      24576:YvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:YHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4

    Score
    7/10
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks