General
- Target 2026-04-21_abd01233fa4d51fb44b9bba749a0596e_amadey_elex_smoke-loader_stop
- Size 455KB
- Sample260421-3cvm8ahs6s
- SHA256 62512f76f2c63c3f1515df32937495cd06bfc460bd58bbe97028c338f9264ba7
- MD5 abd01233fa4d51fb44b9bba749a0596e
- SHA1 2b51356fc147747f0134fe838b47c26b556c674e
- SHA512 fb3f0b2c2c6a56dfca7e4d17ab47533e7c0b54a3cf3b8b5550c6077a12b304996da1170e797e7e51c5b3cf0de4ac6634279b1523e005c5bce75effda8ae39291
- SSDEEP 6144:NK1iEceN+KeoNTYY93dRe7xZGe+Q1Lb3c8AH/R68AuSXBGuaVBt7QwIiZQEszTnP:accNvdRExZGe+Q1nY43x+l7QLiaEyP
- TLSH T197A4BF153790C072E3652B354996E2F55AA9BC344A64E68FF6B43E395E301938A3B30F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-21_abd01233fa4d51fb44b9bba749a0596e_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-04-21_abd01233fa4d51fb44b9bba749a0596e_amadey_elex_smoke-loader_stop
- Size 455KB
- SHA256 62512f76f2c63c3f1515df32937495cd06bfc460bd58bbe97028c338f9264ba7
- MD5 abd01233fa4d51fb44b9bba749a0596e
- SHA1 2b51356fc147747f0134fe838b47c26b556c674e
- SHA512 fb3f0b2c2c6a56dfca7e4d17ab47533e7c0b54a3cf3b8b5550c6077a12b304996da1170e797e7e51c5b3cf0de4ac6634279b1523e005c5bce75effda8ae39291
- SSDEEP 6144:NK1iEceN+KeoNTYY93dRe7xZGe+Q1Lb3c8AH/R68AuSXBGuaVBt7QwIiZQEszTnP:accNvdRExZGe+Q1nY43x+l7QLiaEyP
- TLSH T197A4BF153790C072E3652B354996E2F55AA9BC344A64E68FF6B43E395E301938A3B30F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE