General
- Target 2026-07-11_5c171a81337941cf04f14b69f53356b7_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260711-e7g4lsdz3s
- SHA256 872ac59947e775e0178b5a29af6adf216c5026b05aab534a88b2e347736e3419
- MD5 5c171a81337941cf04f14b69f53356b7
- SHA1 8c9143b55ebdde9725d8980bb2673dcb641f185f
- SHA512 f2815ce37d4c0a2ce3ef78c3bb7a9a3385bef93ab8150ea0ace2deb06dd89e5403491dfaab206e9a5e42a5c9777e8d3cedc5a817731a0b3748e641f5893744ba
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPOlVIT/mqhhcp/eITrUg3cuhsSgsHRu:JRek9CkhN3oc1+cFxTrFc+Y
- TLSH T1D894E0D672C1D032E0A315335BA9C6B1293ABD70672A64C7BB98BB7D6E713C18931343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_5c171a81337941cf04f14b69f53356b7_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_5c171a81337941cf04f14b69f53356b7_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_5c171a81337941cf04f14b69f53356b7_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 872ac59947e775e0178b5a29af6adf216c5026b05aab534a88b2e347736e3419
- MD5 5c171a81337941cf04f14b69f53356b7
- SHA1 8c9143b55ebdde9725d8980bb2673dcb641f185f
- SHA512 f2815ce37d4c0a2ce3ef78c3bb7a9a3385bef93ab8150ea0ace2deb06dd89e5403491dfaab206e9a5e42a5c9777e8d3cedc5a817731a0b3748e641f5893744ba
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPOlVIT/mqhhcp/eITrUg3cuhsSgsHRu:JRek9CkhN3oc1+cFxTrFc+Y
- TLSH T1D894E0D672C1D032E0A315335BA9C6B1293ABD70672A64C7BB98BB7D6E713C18931343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE