General
- Target 2026-04-21_ccf3700d1b1d7ab5b7c03cbc24bb6065_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260421-emykvsbt9x
- SHA256 79a1f6c6281686affd1ba7c66fc16094f9818da9559c25ef1d2631ef3e323a17
- MD5 ccf3700d1b1d7ab5b7c03cbc24bb6065
- SHA1 aacc09e1d34f86416426ec0db9d5cf169defc8b0
- SHA512 b10b419afe7d4af8699dc35dea0f1c872d03729debafb1b6d7fc40f9169eef202f107f28737f5de4a5ce40ffe3cc082941114e4f74ee42579c3c0fbe89e69814
- SSDEEP 49152:PYp95kv1ivvhCcD0Tgy0LXu1qoTzmYvr6/T7:wp9ivMvvkcD+v49pN/3
- TLSH T1F3D522E951E15219BC42211A3AD7FAE009F1EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_ccf3700d1b1d7ab5b7c03cbc24bb6065_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_ccf3700d1b1d7ab5b7c03cbc24bb6065_amadey_elex_smoke-loader_stealc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_ccf3700d1b1d7ab5b7c03cbc24bb6065_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 79a1f6c6281686affd1ba7c66fc16094f9818da9559c25ef1d2631ef3e323a17
- MD5 ccf3700d1b1d7ab5b7c03cbc24bb6065
- SHA1 aacc09e1d34f86416426ec0db9d5cf169defc8b0
- SHA512 b10b419afe7d4af8699dc35dea0f1c872d03729debafb1b6d7fc40f9169eef202f107f28737f5de4a5ce40ffe3cc082941114e4f74ee42579c3c0fbe89e69814
- SSDEEP 49152:PYp95kv1ivvhCcD0Tgy0LXu1qoTzmYvr6/T7:wp9ivMvvkcD+v49pN/3
- TLSH T1F3D522E951E15219BC42211A3AD7FAE009F1EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1