General
- Target 2026-07-05_687f8ff0ea58afa8e0cca69b67620327_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 2.4MB
- Sample260705-tk5cyshv2l
- SHA256 44c7cf6ea729f3438281fd8dc5a2c233b5b60b3540770ad6bdb86b1b32925029
- MD5 687f8ff0ea58afa8e0cca69b67620327
- SHA1 0ad929b49acdeabda51cc4b5668005bbc53ab218
- SHA512 592ffc69285b3a99302023b9f729fbe8b20d22291b901b7ab14812449af826e73e1386b492f17bc62b307778eca0c6051fad7f70118d82ca20a86ac10b76138f
- SSDEEP 12288:+wKfOVRo9yRYT1r7J9+2FQ0/5L2C0EUsvFFkkkkkkkkkkkkkkkkkkkkkkkkkkkkB:+xWVeyRYJ7Jg2FXoVQCW
- TLSH T1FAC59201BFBDC055E4B6267098E245A10E62BC22BA7787DA724C360F8AB375D5513F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_687f8ff0ea58afa8e0cca69b67620327_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_687f8ff0ea58afa8e0cca69b67620327_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_687f8ff0ea58afa8e0cca69b67620327_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 2.4MB
- SHA256 44c7cf6ea729f3438281fd8dc5a2c233b5b60b3540770ad6bdb86b1b32925029
- MD5 687f8ff0ea58afa8e0cca69b67620327
- SHA1 0ad929b49acdeabda51cc4b5668005bbc53ab218
- SHA512 592ffc69285b3a99302023b9f729fbe8b20d22291b901b7ab14812449af826e73e1386b492f17bc62b307778eca0c6051fad7f70118d82ca20a86ac10b76138f
- SSDEEP 12288:+wKfOVRo9yRYT1r7J9+2FQ0/5L2C0EUsvFFkkkkkkkkkkkkkkkkkkkkkkkkkkkkB:+xWVeyRYJ7Jg2FXoVQCW
- TLSH T1FAC59201BFBDC055E4B6267098E245A10E62BC22BA7787DA724C360F8AB375D5513F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory