Analysis
- max time kernel
149s - max time network
117s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/05/2026, 04:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-05_909a3d03f2aeebe21f2f7695f9fcf23f_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_909a3d03f2aeebe21f2f7695f9fcf23f_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-05_909a3d03f2aeebe21f2f7695f9fcf23f_amadey_elex_smoke-loader_stealc_stop.exe
- Size 420KB
- Sample260505-epfstsf19w
- SHA256 8e78fb592f33295f04fc1e57af94c716dae2433c9a7d90b34c5a205e7228f7aa
- MD5 909a3d03f2aeebe21f2f7695f9fcf23f
- SHA1 15f9e6ff8dd0aa0bf4b06c04b3dba75172daf463
- SHA512 afb82de2ed2c8375623135a424e34efbb3cb8c07cb1ea3ea1844ba142e50644b125e79c4ca6a014cb00165006ef0e9181bd0e061c8a49c842a0972fcc5294019
- SSDEEP 6144:/tn2Ui01I4rYYGs4IuX+7Utda59cxVLtWLhjW+S+ViwPxvIKsAHpP:/thDrC1xdI9cftWljW+A86KsAR
- TLSH T17F948D117390C035E3A613714A56D2B41A68BE345EA4928FF3A87E796F312D39A3730F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-05_909a3d03f2aeebe21f2f7695f9fcf23f_amadey_elex_smoke-loader_stealc_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-05_909a3d03f2aeebe21f2f7695f9fcf23f_amadey_elex_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-05_909a3d03f2aeebe21f2f7695f9fcf23f_amadey_elex_smoke-loader_stealc_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:652