General
- Target 2026-04-17_6c532f567fbd9f96ee5ced7884238661_amadey_elex_smoke-loader_stealc_stop
- Size 7.5MB
- Sample260417-t5wljsdv2j
- SHA256 0bb904664bbfc61bca24542c18709a17564f61680c1854e3490e5b934a173680
- MD5 6c532f567fbd9f96ee5ced7884238661
- SHA1 ea3d5a1e1a185cc73c8f68d4fa19c15f783e75b7
- SHA512 5fee5636d9c1c09483b0faea4cd29bf0e25cc75e21901e95ecb33036d189fc8bff120ad79d4d4ec6f2ffdd31964a8e81c0b01e472ab3856306310506e6bc82ed
- SSDEEP 196608:BDlzFnyNNTWraEnbgZbEueqcpLm58fcpRA1MH4udn:BDRFyNMTbgWueqqm5804wV
- TLSH T1F08633113699B432C13484376CC72A00FDF9DA64159768CA6BCC2EB93F286E0D7767A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_6c532f567fbd9f96ee5ced7884238661_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_6c532f567fbd9f96ee5ced7884238661_amadey_elex_smoke-loader_stealc_stop
- Size 7.5MB
- SHA256 0bb904664bbfc61bca24542c18709a17564f61680c1854e3490e5b934a173680
- MD5 6c532f567fbd9f96ee5ced7884238661
- SHA1 ea3d5a1e1a185cc73c8f68d4fa19c15f783e75b7
- SHA512 5fee5636d9c1c09483b0faea4cd29bf0e25cc75e21901e95ecb33036d189fc8bff120ad79d4d4ec6f2ffdd31964a8e81c0b01e472ab3856306310506e6bc82ed
- SSDEEP 196608:BDlzFnyNNTWraEnbgZbEueqcpLm58fcpRA1MH4udn:BDRFyNMTbgWueqqm5804wV
- TLSH T1F08633113699B432C13484376CC72A00FDF9DA64159768CA6BCC2EB93F286E0D7767A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL