General
- Target 2026-05-22_078074b6d9b1697daf3797e63ed218b2_amadey_elex_smoke-loader_stop
- Size 589KB
- Sample260522-q6e4eacy6r
- SHA256 573d035090901e1a1e2456329a622a25cbdc7c5c8c883db5f96b584c32d2cbc2
- MD5 078074b6d9b1697daf3797e63ed218b2
- SHA1 3822f7684d1f3f519b90141381f2929bbc2eefa4
- SHA512 c6132958e022fe9405af232e0f64eac2c0c0eeb8c4cf5e63d60854d9059f901c14ad343e5ddeef9d40c9b6b00001431afc84b646613645ebe3656fe5e8c9c9f1
- SSDEEP 12288:IdBNKTCqqwXCcdgT89+MvA+BisqYpxHtz:ILjQC+fs0p
- TLSH T143D4C0103690C076E3662B314996F6F11AA97C3446A4E68FF7783E3A5D311939B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-22_078074b6d9b1697daf3797e63ed218b2_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-05-22_078074b6d9b1697daf3797e63ed218b2_amadey_elex_smoke-loader_stop
- Size 589KB
- SHA256 573d035090901e1a1e2456329a622a25cbdc7c5c8c883db5f96b584c32d2cbc2
- MD5 078074b6d9b1697daf3797e63ed218b2
- SHA1 3822f7684d1f3f519b90141381f2929bbc2eefa4
- SHA512 c6132958e022fe9405af232e0f64eac2c0c0eeb8c4cf5e63d60854d9059f901c14ad343e5ddeef9d40c9b6b00001431afc84b646613645ebe3656fe5e8c9c9f1
- SSDEEP 12288:IdBNKTCqqwXCcdgT89+MvA+BisqYpxHtz:ILjQC+fs0p
- TLSH T143D4C0103690C076E3662B314996F6F11AA97C3446A4E68FF7783E3A5D311939B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE