General
- Target 2026-07-10_8c954cfac8401f29e0f33bf1488ca7cd_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- Sample260710-nsv7csaw7q
- SHA256 1e9cee4d388c0612926088a8beb3ec49a0a3b1d666deee35114a1469d6139317
- MD5 8c954cfac8401f29e0f33bf1488ca7cd
- SHA1 e10d6e8edc92f8c0e59bc20393b0f220cf6319bc
- SHA512 0da0bc1863823f8326b078dc8f17446117a1eeb3e2bf1c0be316cfb94959f8c43098f1b509b8cc15bcc96938807aae7d6b87e88efb9dd9a32e200069dd95777c
- SSDEEP 49152:PYp95kv1+VO/hzN2vhCcD0Tgy0LXu1qoTzmYvr6/T/:wp9ivUahzN2vkcD+v49pN/7
- TLSH T1F0D522E991E15219BC42211A3AD6FAE008F1E7563FBE38E3DFC32594953B19ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_8c954cfac8401f29e0f33bf1488ca7cd_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8c954cfac8401f29e0f33bf1488ca7cd_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8c954cfac8401f29e0f33bf1488ca7cd_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- SHA256 1e9cee4d388c0612926088a8beb3ec49a0a3b1d666deee35114a1469d6139317
- MD5 8c954cfac8401f29e0f33bf1488ca7cd
- SHA1 e10d6e8edc92f8c0e59bc20393b0f220cf6319bc
- SHA512 0da0bc1863823f8326b078dc8f17446117a1eeb3e2bf1c0be316cfb94959f8c43098f1b509b8cc15bcc96938807aae7d6b87e88efb9dd9a32e200069dd95777c
- SSDEEP 49152:PYp95kv1+VO/hzN2vhCcD0Tgy0LXu1qoTzmYvr6/T/:wp9ivUahzN2vkcD+v49pN/7
- TLSH T1F0D522E991E15219BC42211A3AD6FAE008F1E7563FBE38E3DFC32594953B19ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1