General
- Target 2026-06-01_91bd06b47c0c078eea8300965d8328ad_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- Sample260601-e4lmmact4x
- SHA256 378efdf044c3cf7d2532c212b4878e1a60ff416e72723b9fa12b1ce397695a7a
- MD5 91bd06b47c0c078eea8300965d8328ad
- SHA1 762b743aecdc6d6efb1f06fbd50c3a589cb74821
- SHA512 a92ab42db19155da3a915fe2430af6bbc7d9bf7ec4c7efb5052af23cf9e8cf401d700056be58ca23dbcae41020d5752453248958d15541b0302f9e2dea88973d
- SSDEEP 49152:/Yp95kv1G4wSe4vhCcD0Tgy0LXu1qoTzmYvr6/T2:gp9iv84wSe4vkcD+v49pN/y
- TLSH T180D522E851E15219FC42212A3AD6FAE048F5E7563BBE38E3DBC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_91bd06b47c0c078eea8300965d8328ad_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_91bd06b47c0c078eea8300965d8328ad_amadey_elex_smoke-loader_stealc.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_91bd06b47c0c078eea8300965d8328ad_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- SHA256 378efdf044c3cf7d2532c212b4878e1a60ff416e72723b9fa12b1ce397695a7a
- MD5 91bd06b47c0c078eea8300965d8328ad
- SHA1 762b743aecdc6d6efb1f06fbd50c3a589cb74821
- SHA512 a92ab42db19155da3a915fe2430af6bbc7d9bf7ec4c7efb5052af23cf9e8cf401d700056be58ca23dbcae41020d5752453248958d15541b0302f9e2dea88973d
- SSDEEP 49152:/Yp95kv1G4wSe4vhCcD0Tgy0LXu1qoTzmYvr6/T2:gp9iv84wSe4vkcD+v49pN/y
- TLSH T180D522E851E15219FC42212A3AD6FAE048F5E7563BBE38E3DBC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1