General
- Target 2026-07-01_5f7bac31204e3f802b88a28655d258b8_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260701-b8spyscs3n
- SHA256 67770d72853695b0e709d3449ddb48f0123739c458552bae8dbdaa69ef84dbbd
- MD5 5f7bac31204e3f802b88a28655d258b8
- SHA1 8f43988e553b999ce8125dbb48f03ef2bc306586
- SHA512 f008bcae973cfbaedf1945cef31c80d381d0a154f6a5a349a75f6e76d98ecae062e812be537c96fa80bec5911927196a70312aac67077b6da2795337a72bfbbb
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP3OcDucW+AUKF13QiJp48fshmh/zeXisHRu:JRek9CkhN3oc/cUUKP3QiJpp8czATY
- TLSH T1ED94E0E672C5D032F1A305335AE8C671293ABD70672A60C77698AB7D6EB13C19E71343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_5f7bac31204e3f802b88a28655d258b8_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_5f7bac31204e3f802b88a28655d258b8_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_5f7bac31204e3f802b88a28655d258b8_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 67770d72853695b0e709d3449ddb48f0123739c458552bae8dbdaa69ef84dbbd
- MD5 5f7bac31204e3f802b88a28655d258b8
- SHA1 8f43988e553b999ce8125dbb48f03ef2bc306586
- SHA512 f008bcae973cfbaedf1945cef31c80d381d0a154f6a5a349a75f6e76d98ecae062e812be537c96fa80bec5911927196a70312aac67077b6da2795337a72bfbbb
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP3OcDucW+AUKF13QiJp48fshmh/zeXisHRu:JRek9CkhN3oc/cUUKP3QiJpp8czATY
- TLSH T1ED94E0E672C5D032F1A305335AE8C671293ABD70672A60C77698AB7D6EB13C19E71343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE