General
- Target 2026-07-06_26fb04f91dcc605a916db24a81b11a78_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260706-cg2n8ahs3s
- SHA256 acc1a63765949917a71b97396e238c93700a86b739b633dfe329124de43d7ead
- MD5 26fb04f91dcc605a916db24a81b11a78
- SHA1 c157d301c8e5438b4843d750547326b404d1b4a9
- SHA512 72af8babe536f0c39709cfa296d6d3341b79caf369f59a569da9d8417e321e3d77ef751e8c9076bd5569071b92a7abb4ad6b98fbf1bf703ea542deecc1cebed7
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP5etQz22v0aZRj5KvdsHRu:JRek9CkhN3oczt22cZ5GyY
- TLSH T11794E1E676C1D032E0E315335EA8C671293ABD70A72A50D7B684BB6D6EB13C19E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_26fb04f91dcc605a916db24a81b11a78_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_26fb04f91dcc605a916db24a81b11a78_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_26fb04f91dcc605a916db24a81b11a78_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 acc1a63765949917a71b97396e238c93700a86b739b633dfe329124de43d7ead
- MD5 26fb04f91dcc605a916db24a81b11a78
- SHA1 c157d301c8e5438b4843d750547326b404d1b4a9
- SHA512 72af8babe536f0c39709cfa296d6d3341b79caf369f59a569da9d8417e321e3d77ef751e8c9076bd5569071b92a7abb4ad6b98fbf1bf703ea542deecc1cebed7
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP5etQz22v0aZRj5KvdsHRu:JRek9CkhN3oczt22cZ5GyY
- TLSH T11794E1E676C1D032E0E315335EA8C671293ABD70A72A50D7B684BB6D6EB13C19E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE