General
- Target 2026-06-27_aa90c9a376ad888db6b576b258af1c27_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260629-en7vxsdz5m
- SHA256 2bfa0c2bd87591c3420e6e88cac74faebb01d167095a9be446367410e3b1094d
- MD5 aa90c9a376ad888db6b576b258af1c27
- SHA1 bcdcfaa64ad346ea667e920010cd17d8244b4650
- SHA512 c349b6ceaace46cd37c1aa8d2740b732097631429850a76e00eac6b505e7281f32f7513beb916481d45be6102daaaacc15721fa05d57a1f9b499a1ab0a5f5891
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPyhkOb09KP+bMgz6oFn3f2q1sHRu:JRek9CkhN3ocNa9KGhHvpqY
- TLSH T11194E0E672C5D036E1E315321AD9C6B1293ABE30672A10DBB794BB2D6EB13C15E74343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_aa90c9a376ad888db6b576b258af1c27_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_aa90c9a376ad888db6b576b258af1c27_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_aa90c9a376ad888db6b576b258af1c27_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 2bfa0c2bd87591c3420e6e88cac74faebb01d167095a9be446367410e3b1094d
- MD5 aa90c9a376ad888db6b576b258af1c27
- SHA1 bcdcfaa64ad346ea667e920010cd17d8244b4650
- SHA512 c349b6ceaace46cd37c1aa8d2740b732097631429850a76e00eac6b505e7281f32f7513beb916481d45be6102daaaacc15721fa05d57a1f9b499a1ab0a5f5891
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPyhkOb09KP+bMgz6oFn3f2q1sHRu:JRek9CkhN3ocNa9KGhHvpqY
- TLSH T11194E0E672C5D036E1E315321AD9C6B1293ABE30672A10DBB794BB2D6EB13C15E74343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE