General
- Target 2026-07-13_78dbda610990de42f3093ae761629d78_amadey_cobalt-strike_elex_smoke-loader
- Size 287KB
- Sample260713-mfg9ashv41
- SHA256 507f322f69b1e30aaea90bf31b7121a786e2df54006edd893fbd74959d734473
- MD5 78dbda610990de42f3093ae761629d78
- SHA1 bb9ef528d9440a9b246cc4c79c5f14ef73864a51
- SHA512 ae99af9b4fc0689ab41fcc0ea9223c34023ec594dcd5f58d2fa0093ed43077b4c5415af2c213056dfed2a307502f9cb6fa8ae58b2dc81ccdc82a477d449730f7
- SSDEEP 6144:V0YsGDnRvvHXMhRiogrwICioDzVPKk+IR:V0Y77RX3Mh+uKsR
- TLSH T102547C10BA81C032D6565832596ADF764A3DAC604F2159CBB3C45EFECE342C1AF35F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-13_78dbda610990de42f3093ae761629d78_amadey_cobalt-strike_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_78dbda610990de42f3093ae761629d78_amadey_cobalt-strike_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_78dbda610990de42f3093ae761629d78_amadey_cobalt-strike_elex_smoke-loader
- Size 287KB
- SHA256 507f322f69b1e30aaea90bf31b7121a786e2df54006edd893fbd74959d734473
- MD5 78dbda610990de42f3093ae761629d78
- SHA1 bb9ef528d9440a9b246cc4c79c5f14ef73864a51
- SHA512 ae99af9b4fc0689ab41fcc0ea9223c34023ec594dcd5f58d2fa0093ed43077b4c5415af2c213056dfed2a307502f9cb6fa8ae58b2dc81ccdc82a477d449730f7
- SSDEEP 6144:V0YsGDnRvvHXMhRiogrwICioDzVPKk+IR:V0Y77RX3Mh+uKsR
- TLSH T102547C10BA81C032D6565832596ADF764A3DAC604F2159CBB3C45EFECE342C1AF35F9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.