General

  • Target

    2025-07-04_2797dd95ee3ee45cdd7ec9ded4a6a0cb_amadey_elex_smoke-loader_stop

  • Size

    5.2MB

  • Sample

    250704-nzbrasdr6t

  • MD5

    2797dd95ee3ee45cdd7ec9ded4a6a0cb

  • SHA1

    e972802bef76a7eb1cb6471ec4af717612ba2174

  • SHA256

    6b1be153eb953bdf640200a3f4a7df83ae00562234d5e2db71c02519936c93cf

  • SHA512

    7094f91c9f9411e9bd21a117c40d7dcf878b3c8b1573adf996062ef4c36989530cb1e9addfb17c889272a782d4da7dc29817b7627d6e1ee581f49d66dc896234

  • SSDEEP

    98304:iLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLk:0jJS

Malware Config

Targets

    • Target

      2025-07-04_2797dd95ee3ee45cdd7ec9ded4a6a0cb_amadey_elex_smoke-loader_stop

    • Size

      5.2MB

    • MD5

      2797dd95ee3ee45cdd7ec9ded4a6a0cb

    • SHA1

      e972802bef76a7eb1cb6471ec4af717612ba2174

    • SHA256

      6b1be153eb953bdf640200a3f4a7df83ae00562234d5e2db71c02519936c93cf

    • SHA512

      7094f91c9f9411e9bd21a117c40d7dcf878b3c8b1573adf996062ef4c36989530cb1e9addfb17c889272a782d4da7dc29817b7627d6e1ee581f49d66dc896234

    • SSDEEP

      98304:iLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLk:0jJS

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks