General
- Target 2026-07-10_46e0f4dc5300af4f71bb2b60ba3fe079_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260710-j5dqmag151
- SHA256 f02644e6fc3f9a13db5ec3cd593d99f388699f5ca7c462fcedc0854a10d01074
- MD5 46e0f4dc5300af4f71bb2b60ba3fe079
- SHA1 4ec56f9c6ff20f4c4355189e2f77e75ccb448e9f
- SHA512 f425378b90b3f7554f04deffe6621c88ae6637837a3380a2abdfbea2817bd697ddf64398c02ad346d6d2c8828e220b4df902f726b09f9f69844da12fc77e771c
- SSDEEP 49152:SYp95kv1pBR4TnvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivfTKnvkcD+v49pN/3
- TLSH T180D522E951E15619BC42211A3AD7FAE018F1EB563BBE38E3DFC32594953B09ADE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_46e0f4dc5300af4f71bb2b60ba3fe079_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_46e0f4dc5300af4f71bb2b60ba3fe079_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_46e0f4dc5300af4f71bb2b60ba3fe079_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 f02644e6fc3f9a13db5ec3cd593d99f388699f5ca7c462fcedc0854a10d01074
- MD5 46e0f4dc5300af4f71bb2b60ba3fe079
- SHA1 4ec56f9c6ff20f4c4355189e2f77e75ccb448e9f
- SHA512 f425378b90b3f7554f04deffe6621c88ae6637837a3380a2abdfbea2817bd697ddf64398c02ad346d6d2c8828e220b4df902f726b09f9f69844da12fc77e771c
- SSDEEP 49152:SYp95kv1pBR4TnvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivfTKnvkcD+v49pN/3
- TLSH T180D522E951E15619BC42211A3AD7FAE018F1EB563BBE38E3DFC32594953B09ADE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1