General
- Target 2026-04-18_2cb5b54e87fef6ea712c159447db92c5_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- Sample260418-2pexvsfx2y
- SHA256 ba51436c695223b206c56e5cf7ac6edaa076172106cb525edf85a7d4a9a468d1
- MD5 2cb5b54e87fef6ea712c159447db92c5
- SHA1 eba05a464698cb0ede072926332dcae5225940b6
- SHA512 1e95e9add25a4b2e2aed30212aafd51fceb4e41d14591fdd5b649b893c3c4aa625100ddef7dc642c4647d8e51044531a013c2553958e774b3b417407fc1178b6
- SSDEEP 49152:/Yp95kv16vhCcD0Tgy0LXu1qoTzmYvr6/T2:gp9ivovkcD+v49pN/y
- TLSH T15DD522E951E15219FC42212A3AD6FAE018F5E7563BBE38E3DFC32594953B09ADE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-18_2cb5b54e87fef6ea712c159447db92c5_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_2cb5b54e87fef6ea712c159447db92c5_amadey_elex_smoke-loader_stealc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_2cb5b54e87fef6ea712c159447db92c5_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- SHA256 ba51436c695223b206c56e5cf7ac6edaa076172106cb525edf85a7d4a9a468d1
- MD5 2cb5b54e87fef6ea712c159447db92c5
- SHA1 eba05a464698cb0ede072926332dcae5225940b6
- SHA512 1e95e9add25a4b2e2aed30212aafd51fceb4e41d14591fdd5b649b893c3c4aa625100ddef7dc642c4647d8e51044531a013c2553958e774b3b417407fc1178b6
- SSDEEP 49152:/Yp95kv16vhCcD0Tgy0LXu1qoTzmYvr6/T2:gp9ivovkcD+v49pN/y
- TLSH T15DD522E951E15219FC42212A3AD6FAE018F5E7563BBE38E3DFC32594953B09ADE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1