Analysis
- max time kernel
149s - max time network
131s - platform
windows10-2004_x64 - resource
win10v2004-20251016-en - resource tags
- submitted
18/10/2025, 16:27
General
- Target 2025-10-18_29eef07a6347b3b0406ca3cd6f40e374_amadey_elex_smoke-loader.exe
- Size 101KB
- Sample251018-tyfazsspal
- SHA256 1ea84ed3820c5d9ba04c5500f632d8eb8cc4db2e8c360e544266fed6e1b081d5
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-10-18_29eef07a6347b3b0406ca3cd6f40e374_amadey_elex_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2025-10-18_29eef07a6347b3b0406ca3cd6f40e374_amadey_elex_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4572-0-0x00000000025F0000-0x000000000262F000-memory.dmp
memory/4572-2-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-1-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-3-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-4-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-5-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-6-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-7-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-8-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-9-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-10-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-11-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-12-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-13-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-14-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-15-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-16-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-17-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-18-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-19-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-20-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-21-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-22-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-23-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-24-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-25-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-26-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-27-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-28-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-29-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-30-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-31-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-32-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-33-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-34-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-35-0x0000000002770000-0x00000000027B6000-memory.dmp
memory/4572-36-0x0000000002770000-0x00000000027B6000-memory.dmp