General
- Target 2026-07-11_aed8b6c40329d5e64e5b7398f1cd6146_amadey_elex_smoke-loader_stop
- Size 2.0MB
- Sample260711-k7amesez6n
- SHA256 b2d33fa72fb5595008ac7fd7b5bbafacaf6d2069a8082cd411e1b65642ee5162
- MD5 aed8b6c40329d5e64e5b7398f1cd6146
- SHA1 cf9614d2e6f2104db8e1efaa0ec12cbeafb4a913
- SHA512 0188afdc76fbf8b84f5d5a0d9f316c9c4d2d236686a6fd85e1f1bacde2e11012d6ff73c112384de593e8066259579188c4fc72992891def98086ade908879a33
- SSDEEP 24576:3tTJapwJDHlzqP7IvIaPLjKYeDv7q86r9NMqWe4tZZ82hwn5Gy+6+w2eANLst:3tTJapwNHdxbB4srUem8YyGFJY
- TLSH T164A55C20E381D13AF9B329F19EBE516D6118BE70075450C7A3C81EEE5EB56E23D32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-11_aed8b6c40329d5e64e5b7398f1cd6146_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_aed8b6c40329d5e64e5b7398f1cd6146_amadey_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_aed8b6c40329d5e64e5b7398f1cd6146_amadey_elex_smoke-loader_stop
- Size 2.0MB
- SHA256 b2d33fa72fb5595008ac7fd7b5bbafacaf6d2069a8082cd411e1b65642ee5162
- MD5 aed8b6c40329d5e64e5b7398f1cd6146
- SHA1 cf9614d2e6f2104db8e1efaa0ec12cbeafb4a913
- SHA512 0188afdc76fbf8b84f5d5a0d9f316c9c4d2d236686a6fd85e1f1bacde2e11012d6ff73c112384de593e8066259579188c4fc72992891def98086ade908879a33
- SSDEEP 24576:3tTJapwJDHlzqP7IvIaPLjKYeDv7q86r9NMqWe4tZZ82hwn5Gy+6+w2eANLst:3tTJapwNHdxbB4srUem8YyGFJY
- TLSH T164A55C20E381D13AF9B329F19EBE516D6118BE70075450C7A3C81EEE5EB56E23D32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.