General
- Target 2026-06-30_a3de2d3aa0c1c7845fbbf907bb3b7f96_amadey_elex_smoke-loader
- Size 2.0MB
- Sample260701-d2y99sdw5q
- SHA256 ad32deee45723fab3e6534c3e0214b96c6c542736ed692cbd3f8da28ad99dde6
- MD5 a3de2d3aa0c1c7845fbbf907bb3b7f96
- SHA1 dea26bb3de8f74c1ea0e5badbf43950134db3630
- SHA512 c5f6db8f4d433380d942d1a241685d931e76b8c25c172395edf299e1c74902b00478b7e0b6007be5895187966bbdde3cdc94cd3e9e9d6a8991c2b9c3a9d5f39b
- SSDEEP 49152:OFUcx88PWPOpX0SFdxYMHOMYRnPTDuNaH/yGc:O+K88uPCHPZOMYRnbaNafyGc
- TLSH T1ADA51294F781C1A6E4A20A759492C3E79C657E3C6AA05D873FCC371F3E349C1AA2174B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_a3de2d3aa0c1c7845fbbf907bb3b7f96_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_a3de2d3aa0c1c7845fbbf907bb3b7f96_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260630-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_a3de2d3aa0c1c7845fbbf907bb3b7f96_amadey_elex_smoke-loader
- Size 2.0MB
- SHA256 ad32deee45723fab3e6534c3e0214b96c6c542736ed692cbd3f8da28ad99dde6
- MD5 a3de2d3aa0c1c7845fbbf907bb3b7f96
- SHA1 dea26bb3de8f74c1ea0e5badbf43950134db3630
- SHA512 c5f6db8f4d433380d942d1a241685d931e76b8c25c172395edf299e1c74902b00478b7e0b6007be5895187966bbdde3cdc94cd3e9e9d6a8991c2b9c3a9d5f39b
- SSDEEP 49152:OFUcx88PWPOpX0SFdxYMHOMYRnPTDuNaH/yGc:O+K88uPCHPZOMYRnbaNafyGc
- TLSH T1ADA51294F781C1A6E4A20A759492C3E79C657E3C6AA05D873FCC371F3E349C1AA2174B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.