General
- Target 2026-06-27_faa45603a9ca51f1d9501211ad1e9bd3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260629-bfvnvah121
- SHA256 2cdc5fb4bc2a69a7cd330e7cde8c8971f34be5e8207051222fd5d2141c06f2bb
- MD5 faa45603a9ca51f1d9501211ad1e9bd3
- SHA1 f3ed94d83fcc39062c8986f17dd69773d9436250
- SHA512 2c794f46cd7b5e8990a40c2a10c095a1da47ef2444639241e3b908f44b6caa18029d34f752f1cb673a4e842d34aeb2db4b9b7cad36eed8051f421d47dac48aba
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPB1hTtt9a/QGAq/3ymsHRu:JRek9CkhN3ocyltt9a/LAq/3yXY
- TLSH T1E794E0E672C5D032E1D315331AA9C671293ABD70672A61C7B798BB6D6EB13C09E74303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_faa45603a9ca51f1d9501211ad1e9bd3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_faa45603a9ca51f1d9501211ad1e9bd3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_faa45603a9ca51f1d9501211ad1e9bd3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 2cdc5fb4bc2a69a7cd330e7cde8c8971f34be5e8207051222fd5d2141c06f2bb
- MD5 faa45603a9ca51f1d9501211ad1e9bd3
- SHA1 f3ed94d83fcc39062c8986f17dd69773d9436250
- SHA512 2c794f46cd7b5e8990a40c2a10c095a1da47ef2444639241e3b908f44b6caa18029d34f752f1cb673a4e842d34aeb2db4b9b7cad36eed8051f421d47dac48aba
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPB1hTtt9a/QGAq/3ymsHRu:JRek9CkhN3ocyltt9a/LAq/3yXY
- TLSH T1E794E0E672C5D032E1D315331AA9C671293ABD70672A61C7B798BB6D6EB13C09E74303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE