General
- Target 2026-06-30_e478650b86c002be6011884bce93888b_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260701-cs3ewscx2p
- SHA256 37163ae5a00cc9e15252163734a50f0f629949ade22e4dd3b137e47c90b5cc45
- MD5 e478650b86c002be6011884bce93888b
- SHA1 ac84a2e0fc5ce6cdd7540ad7e069457b329cefa7
- SHA512 c8fd0bda64f1786e290336d033fe727e814f0113fbc84a63dda33b7dec1b21061a0356cded68fe1edb73627360cf0ca7b5cd5958b4d99ec7be985eb4bab686fb
- SSDEEP 49152:SYp95kv1G78m8evhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivPQvkcD+v49pN/3
- TLSH T13BD522ED91E15219BC42211A2AD6FAE004F1EB563BBE78E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_e478650b86c002be6011884bce93888b_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_e478650b86c002be6011884bce93888b_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_e478650b86c002be6011884bce93888b_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 37163ae5a00cc9e15252163734a50f0f629949ade22e4dd3b137e47c90b5cc45
- MD5 e478650b86c002be6011884bce93888b
- SHA1 ac84a2e0fc5ce6cdd7540ad7e069457b329cefa7
- SHA512 c8fd0bda64f1786e290336d033fe727e814f0113fbc84a63dda33b7dec1b21061a0356cded68fe1edb73627360cf0ca7b5cd5958b4d99ec7be985eb4bab686fb
- SSDEEP 49152:SYp95kv1G78m8evhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivPQvkcD+v49pN/3
- TLSH T13BD522ED91E15219BC42211A2AD6FAE004F1EB563BBE78E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1