General
- Target 2026-05-06_57e09e2403a9b150cfcc47318a9b3df1_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- Sample260506-m68tyaf18s
- SHA256 a90cea227e3930abbe64481f73e5ae40a34d22b09cdad2f22d909eb8a67c0b06
- MD5 57e09e2403a9b150cfcc47318a9b3df1
- SHA1 bb05199743262a2d3ef14fd778166ceb6dac1eea
- SHA512 24f1bd11d68932dbd82715cf29d7b37cdc9dfea03f758894e15a2e861f2b03ef8be7a96c04d3fef3f8839e590b0863ec116516e32297117cae7c8a6cc53e16cd
- SSDEEP 49152:/Yp95kv1vZoevhCcD0Tgy0LXu1qoTzmYvr6/T2:gp9ivVZ9vkcD+v49pN/y
- TLSH T1CED522E991E15219FC42212A2AD7FAE004F1E7563BBE38E3DFC32594953B09ADE1D305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_57e09e2403a9b150cfcc47318a9b3df1_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_57e09e2403a9b150cfcc47318a9b3df1_amadey_elex_smoke-loader_stealc.exe
Resource
win11-20250619-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_57e09e2403a9b150cfcc47318a9b3df1_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- SHA256 a90cea227e3930abbe64481f73e5ae40a34d22b09cdad2f22d909eb8a67c0b06
- MD5 57e09e2403a9b150cfcc47318a9b3df1
- SHA1 bb05199743262a2d3ef14fd778166ceb6dac1eea
- SHA512 24f1bd11d68932dbd82715cf29d7b37cdc9dfea03f758894e15a2e861f2b03ef8be7a96c04d3fef3f8839e590b0863ec116516e32297117cae7c8a6cc53e16cd
- SSDEEP 49152:/Yp95kv1vZoevhCcD0Tgy0LXu1qoTzmYvr6/T2:gp9ivVZ9vkcD+v49pN/y
- TLSH T1CED522E991E15219FC42212A2AD7FAE004F1E7563BBE38E3DFC32594953B09ADE1D305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1