General
- Target 2026-06-30_6923abdc6cc7f79e933c07f3a77cadc3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260701-e6t2saet6m
- SHA256 dd9ea18a32cff13ab99f1aa6e1e459e6d579f522310ef864498774e37cc7f7d1
- MD5 6923abdc6cc7f79e933c07f3a77cadc3
- SHA1 6ffd8d6ede28531430c4079ef0c55e2345404b45
- SHA512 7b8c18b029a77adbbf9932b242addbade4b727ac9f24e184116796f7748c226f8890b82345bab7ac30d62cef775a08c34b36a0707032d025e3458cb882c44fbe
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPUQE9JlamnzNSv7v0uazE4sHRu:JRek9CkhN3oclf9HBYb0uRhY
- TLSH T18B94E0D672C4D032E0E315331EA8C7A2293ABD70672A61D77668BB6D6E713C19E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_6923abdc6cc7f79e933c07f3a77cadc3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_6923abdc6cc7f79e933c07f3a77cadc3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_6923abdc6cc7f79e933c07f3a77cadc3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 dd9ea18a32cff13ab99f1aa6e1e459e6d579f522310ef864498774e37cc7f7d1
- MD5 6923abdc6cc7f79e933c07f3a77cadc3
- SHA1 6ffd8d6ede28531430c4079ef0c55e2345404b45
- SHA512 7b8c18b029a77adbbf9932b242addbade4b727ac9f24e184116796f7748c226f8890b82345bab7ac30d62cef775a08c34b36a0707032d025e3458cb882c44fbe
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPUQE9JlamnzNSv7v0uazE4sHRu:JRek9CkhN3oclf9HBYb0uRhY
- TLSH T18B94E0D672C4D032E0E315331EA8C7A2293ABD70672A61D77668BB6D6E713C19E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE