General
- Target 2026-05-07_cb1f4583a66f06d8b1656d3fe10a3b16_amadey_elex_nionspy_smoke-loader
- Size 14.6MB
- Sample260507-a9flcagy6r
- SHA256 6b60ba0f3c400eae0a413767245abc798366411867a988bff804c0d90099f42c
- MD5 cb1f4583a66f06d8b1656d3fe10a3b16
- SHA1 044d30ca76197f448cb7d789e9b22581216e74d2
- SHA512 d1c5dbebb9a84961e71cbc76e8a32e924563b425eb710e374990717f744b76f64537573d647e0f6bf01e41fc3ee402acf748878e7a0b23906d7495d532eb12f6
- SSDEEP 196608:u7m707m7z7m707m7f7m707m7z7m707m7c7m707m7z7m707m7f7m707m7z7m707m7:
- TLSH T19DF69E00B6E1C4B2D857667440ABABA60D7D36352F26E2D3F7601E649D603F2BE3435E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-07_cb1f4583a66f06d8b1656d3fe10a3b16_amadey_elex_nionspy_smoke-loader.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_cb1f4583a66f06d8b1656d3fe10a3b16_amadey_elex_nionspy_smoke-loader.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_cb1f4583a66f06d8b1656d3fe10a3b16_amadey_elex_nionspy_smoke-loader
- Size 14.6MB
- SHA256 6b60ba0f3c400eae0a413767245abc798366411867a988bff804c0d90099f42c
- MD5 cb1f4583a66f06d8b1656d3fe10a3b16
- SHA1 044d30ca76197f448cb7d789e9b22581216e74d2
- SHA512 d1c5dbebb9a84961e71cbc76e8a32e924563b425eb710e374990717f744b76f64537573d647e0f6bf01e41fc3ee402acf748878e7a0b23906d7495d532eb12f6
- SSDEEP 196608:u7m707m7z7m707m7f7m707m7z7m707m7c7m707m7z7m707m7f7m707m7z7m707m7:
- TLSH T19DF69E00B6E1C4B2D857667440ABABA60D7D36352F26E2D3F7601E649D603F2BE3435E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE