General
- Target 2026-07-06_ed182f567783fe7c1c8dd1017a6d712a_amadey_elex_smoke-loader
- Size 2.0MB
- Sample260707-ae6t2saz3j
- SHA256 4cfdf58f04ee3330eaad79cc9d37672459e43c913b7577b864d186f4e03eaa62
- MD5 ed182f567783fe7c1c8dd1017a6d712a
- SHA1 2dcf9c0496366b8abc431b3cde6827680dd2f327
- SHA512 a81fa148282a80a8ccda82760dcf92f0623e4d5a324632772fe31b1c52c80db8e434b5b194b6ce908049bbd3a433cd88045727a9ed9195cb56ee6f243a827410
- SSDEEP 49152:OFUcx88PWPOpX0SFGLoRrjzYfvd9xkVNz5XCBvJBOFx6IXyGc:O+K88uPCHcLoRnzEvdzaz1CBOFxzXyGc
- TLSH T189A52254F792C2B2E4910A75669283E29C783E7C6B620D837FCD362E2D74DC19A31787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ed182f567783fe7c1c8dd1017a6d712a_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ed182f567783fe7c1c8dd1017a6d712a_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ed182f567783fe7c1c8dd1017a6d712a_amadey_elex_smoke-loader
- Size 2.0MB
- SHA256 4cfdf58f04ee3330eaad79cc9d37672459e43c913b7577b864d186f4e03eaa62
- MD5 ed182f567783fe7c1c8dd1017a6d712a
- SHA1 2dcf9c0496366b8abc431b3cde6827680dd2f327
- SHA512 a81fa148282a80a8ccda82760dcf92f0623e4d5a324632772fe31b1c52c80db8e434b5b194b6ce908049bbd3a433cd88045727a9ed9195cb56ee6f243a827410
- SSDEEP 49152:OFUcx88PWPOpX0SFGLoRrjzYfvd9xkVNz5XCBvJBOFx6IXyGc:O+K88uPCHcLoRnzEvdzaz1CBOFxzXyGc
- TLSH T189A52254F792C2B2E4910A75669283E29C783E7C6B620D837FCD362E2D74DC19A31787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.