General
- Target 2026-06-28_ec8f202e3df72cc83347e8de9023f117_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260628-wrm4csaz5t
- SHA256 c1aa19f380e402d56d463c55b8670cfe181a312c23814c99b713f3198d8eb1e2
- MD5 ec8f202e3df72cc83347e8de9023f117
- SHA1 77269cd4819b14865964f80fa2a7f63adfbb81db
- SHA512 798ce4f0a47551ddd0317226ad09921663731092ea2e89f0a8eeccfec58c7f5ea726a6985a2e25cd77dd5350aeffaca0b0bd58977b9ef77013811374ca5ee8d5
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP1ECCOTfF6NIPeHMDIxjeo+b8G2km+ynqsHRu:JRek9CkhN3ocOCofFFPjDIxaoCfgLY
- TLSH T14E94E1D672C1D032E0A315321AD9C6B12D3ABD70672A65C7B798BB6D6EB13C19E71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_ec8f202e3df72cc83347e8de9023f117_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_ec8f202e3df72cc83347e8de9023f117_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_ec8f202e3df72cc83347e8de9023f117_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 c1aa19f380e402d56d463c55b8670cfe181a312c23814c99b713f3198d8eb1e2
- MD5 ec8f202e3df72cc83347e8de9023f117
- SHA1 77269cd4819b14865964f80fa2a7f63adfbb81db
- SHA512 798ce4f0a47551ddd0317226ad09921663731092ea2e89f0a8eeccfec58c7f5ea726a6985a2e25cd77dd5350aeffaca0b0bd58977b9ef77013811374ca5ee8d5
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP1ECCOTfF6NIPeHMDIxjeo+b8G2km+ynqsHRu:JRek9CkhN3ocOCofFFPjDIxaoCfgLY
- TLSH T14E94E1D672C1D032E0A315321AD9C6B12D3ABD70672A65C7B798BB6D6EB13C19E71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE