General
- Target 2026-06-27_6ee670e52c60d6c5d6e2092945f32427_amadey_elex_nionspy_smoke-loader
- Size 1.5MB
- Sample260629-g2rrzagx3p
- SHA256 99e4e466a11f966fb532ee5623f68f71faa5cd69327922e4825d3ab52da9c979
- MD5 6ee670e52c60d6c5d6e2092945f32427
- SHA1 36b0f8e6653b8d9823a18d08a8dffd76a674ba63
- SHA512 b73478285b3ccf6d32c0e6e526d54bc5ef42035e4533077a17dc4c61a07fb580489cc7d39780fd3dce657868220cbee1acac691fc540c1a4643532c190e04e8f
- SSDEEP 24576:sp6xWv9NwsDjHp6xWv9NwsDjLp6xWv9NwsDjHYp6xWv9NwsDjHp6xWv9NwsDjLpz:uz9C0tz9C0hz9C0Wz9C0tz9C0hz9C0
- TLSH T1FD658E00B6E0C4B2D85666B440ABAB760D7D36352F26E5D3F7601E649D603F2BE3436E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_6ee670e52c60d6c5d6e2092945f32427_amadey_elex_nionspy_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_6ee670e52c60d6c5d6e2092945f32427_amadey_elex_nionspy_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_6ee670e52c60d6c5d6e2092945f32427_amadey_elex_nionspy_smoke-loader
- Size 1.5MB
- SHA256 99e4e466a11f966fb532ee5623f68f71faa5cd69327922e4825d3ab52da9c979
- MD5 6ee670e52c60d6c5d6e2092945f32427
- SHA1 36b0f8e6653b8d9823a18d08a8dffd76a674ba63
- SHA512 b73478285b3ccf6d32c0e6e526d54bc5ef42035e4533077a17dc4c61a07fb580489cc7d39780fd3dce657868220cbee1acac691fc540c1a4643532c190e04e8f
- SSDEEP 24576:sp6xWv9NwsDjHp6xWv9NwsDjLp6xWv9NwsDjHYp6xWv9NwsDjHp6xWv9NwsDjLpz:uz9C0tz9C0hz9C0Wz9C0tz9C0hz9C0
- TLSH T1FD658E00B6E0C4B2D85666B440ABAB760D7D36352F26E5D3F7601E649D603F2BE3436E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE