General
- Target 2026-07-10_f97337302dce715ebbc431305d7bbae9_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260710-vkhpmafw2s
- SHA256 d5585601b1785140f549d24b977607ccaef0b563349cca53cd8c9cecbb4d3e37
- MD5 f97337302dce715ebbc431305d7bbae9
- SHA1 53835f49344b21c04ae032ec29e5b0c08e99748f
- SHA512 fd5b4027df28ac30772a6d0db9d77fa77458bc39332a767d5d2f0ab601e570b0f7e24aa2a975aa5dd74938c09d3d35515f2f65c4ee1ef3dc6e2a1eb4a731c944
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPNpdvn807iJkdjinHGh+Fj+jIPKsHRu:JRek9CkhN3ocAjnjmCtYrNuI7Y
- TLSH T1DF94E1E232D1D036E0E215331AA9C6B1293ABD70673A60C7B798BB2D6E713C19D75743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_f97337302dce715ebbc431305d7bbae9_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_f97337302dce715ebbc431305d7bbae9_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_f97337302dce715ebbc431305d7bbae9_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 d5585601b1785140f549d24b977607ccaef0b563349cca53cd8c9cecbb4d3e37
- MD5 f97337302dce715ebbc431305d7bbae9
- SHA1 53835f49344b21c04ae032ec29e5b0c08e99748f
- SHA512 fd5b4027df28ac30772a6d0db9d77fa77458bc39332a767d5d2f0ab601e570b0f7e24aa2a975aa5dd74938c09d3d35515f2f65c4ee1ef3dc6e2a1eb4a731c944
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPNpdvn807iJkdjinHGh+Fj+jIPKsHRu:JRek9CkhN3ocAjnjmCtYrNuI7Y
- TLSH T1DF94E1E232D1D036E0E215331AA9C6B1293ABD70673A60C7B798BB2D6E713C19D75743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE