General
-
Target
2025-04-26_a8495d682a367ddb6f16a46f8016b780_amadey_black-basta_elex_smoke-loader
-
Size
11.8MB
-
Sample
250426-zj9h6s1q15
-
MD5
a8495d682a367ddb6f16a46f8016b780
-
SHA1
3f4decc42d38e8e4451f2d4aa724ccc596495301
-
SHA256
890e8811febe69faf4c150626250dc6f883763d8523292a6b188fcb5b30ea250
-
SHA512
829da94e0a8631095744b2b4705ee16618290a57e9aad6abb3df8ee0531822cb1d9a3564dabba9094ebe801da15195379dff9174a8621f11c6b4b56077158995
-
SSDEEP
98304:dLu13/Jk2Ph05e+g3FgbhfzuCPtj1HSU2jXso8An0yUll8cMgNxnQkYlgD5Sa:dikgcNlhrVp1HSTDsoTn90lcGeFa
Behavioral task
behavioral1
Sample
2025-04-26_a8495d682a367ddb6f16a46f8016b780_amadey_black-basta_elex_smoke-loader.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
2025-04-26_a8495d682a367ddb6f16a46f8016b780_amadey_black-basta_elex_smoke-loader.exe
Resource
win11-20250410-en
Malware Config
Targets
-
-
Target
2025-04-26_a8495d682a367ddb6f16a46f8016b780_amadey_black-basta_elex_smoke-loader
-
Size
11.8MB
-
MD5
a8495d682a367ddb6f16a46f8016b780
-
SHA1
3f4decc42d38e8e4451f2d4aa724ccc596495301
-
SHA256
890e8811febe69faf4c150626250dc6f883763d8523292a6b188fcb5b30ea250
-
SHA512
829da94e0a8631095744b2b4705ee16618290a57e9aad6abb3df8ee0531822cb1d9a3564dabba9094ebe801da15195379dff9174a8621f11c6b4b56077158995
-
SSDEEP
98304:dLu13/Jk2Ph05e+g3FgbhfzuCPtj1HSU2jXso8An0yUll8cMgNxnQkYlgD5Sa:dikgcNlhrVp1HSTDsoTn90lcGeFa
Score10/10-
Panda Stealer payload
-
Pandastealer family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-