General
- Target 2026-07-08_96fde8a16fe75faaa536f0d22aa43259_amadey_elex_emotet_smoke-loader_stealc_stop
- Size 1.3MB
- Sample260708-nbl75aex3w
- SHA256 4b57711835b3c7d44684243d7e676499aadd50a4360dfca8e4ae3eec184ec586
- MD5 96fde8a16fe75faaa536f0d22aa43259
- SHA1 a7de13911e6da0eedb2df6269a4f8ff9c39b6556
- SHA512 1dc48e1be2e9654bbbc9d95bac86f74b207210e2017fc2b5de0bef2b90e23f22e50298d6a5257c6a57ebeba7ce42b6b6833635b168ea0b4d9be78c201a04c8c2
- SSDEEP 12288:hLs9TN1VXUdYlTJ4ZmnDMfQFHMZlnHrXoxWL3mW05PXUcPttip1VS9uhrFj:VKnSYlT6Z5fISlnEYG1Pt8rhrFj
- TLSH T1AB55012376D5C873D25302724CDBCB79A276BC215A6181CB3B917F1DAEB13D2AA76301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_96fde8a16fe75faaa536f0d22aa43259_amadey_elex_emotet_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_96fde8a16fe75faaa536f0d22aa43259_amadey_elex_emotet_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_96fde8a16fe75faaa536f0d22aa43259_amadey_elex_emotet_smoke-loader_stealc_stop
- Size 1.3MB
- SHA256 4b57711835b3c7d44684243d7e676499aadd50a4360dfca8e4ae3eec184ec586
- MD5 96fde8a16fe75faaa536f0d22aa43259
- SHA1 a7de13911e6da0eedb2df6269a4f8ff9c39b6556
- SHA512 1dc48e1be2e9654bbbc9d95bac86f74b207210e2017fc2b5de0bef2b90e23f22e50298d6a5257c6a57ebeba7ce42b6b6833635b168ea0b4d9be78c201a04c8c2
- SSDEEP 12288:hLs9TN1VXUdYlTJ4ZmnDMfQFHMZlnHrXoxWL3mW05PXUcPttip1VS9uhrFj:VKnSYlT6Z5fISlnEYG1Pt8rhrFj
- TLSH T1AB55012376D5C873D25302724CDBCB79A276BC215A6181CB3B917F1DAEB13D2AA76301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory