General
- Target 2026-07-13_c1a6f7a9dc9919b403877e120aeb78c4_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260714-a1bk2abv6m
- SHA256 43a18bc1370ff2f6358de7773799bb02fc3fcaa08398054cc6a93e218bccdce4
- MD5 c1a6f7a9dc9919b403877e120aeb78c4
- SHA1 662eb53be12c273915b4435f43d0b391a5c7dd70
- SHA512 a46e0d5746c1f45e20da81640196a8a076f3dc5ad5987bc17fa1c6741b025b2b46ab31ccf554b572b8ce6acad74d22c6d583f51ccb749ab983aec7d8475596df
- SSDEEP 49152:ck7cmFdogWOq/Xngk/FrhgxMx/iA3ztuZP9E6ywZVHEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+RL6+zYP/ZVkQ2xjdtFSjYp
- TLSH T1C6E52354969883F2D14038F46A06C7EF5E383E3C5627DDCB3AEA3B58AD201C38536A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_c1a6f7a9dc9919b403877e120aeb78c4_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_c1a6f7a9dc9919b403877e120aeb78c4_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_c1a6f7a9dc9919b403877e120aeb78c4_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 43a18bc1370ff2f6358de7773799bb02fc3fcaa08398054cc6a93e218bccdce4
- MD5 c1a6f7a9dc9919b403877e120aeb78c4
- SHA1 662eb53be12c273915b4435f43d0b391a5c7dd70
- SHA512 a46e0d5746c1f45e20da81640196a8a076f3dc5ad5987bc17fa1c6741b025b2b46ab31ccf554b572b8ce6acad74d22c6d583f51ccb749ab983aec7d8475596df
- SSDEEP 49152:ck7cmFdogWOq/Xngk/FrhgxMx/iA3ztuZP9E6ywZVHEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+RL6+zYP/ZVkQ2xjdtFSjYp
- TLSH T1C6E52354969883F2D14038F46A06C7EF5E383E3C5627DDCB3AEA3B58AD201C38536A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE