General
- Target 2026-07-13_d0a6fdf99822e98e554779fc922bb57a_amadey_elex_smoke-loader
- Size 3.4MB
- Sample260714-axtbnsbv3n
- SHA256 739b93ba6e359c95e7c18629f27dd339a2527d0e00c13884c6d4ada43669e7b6
- MD5 d0a6fdf99822e98e554779fc922bb57a
- SHA1 ae1446286d56518f553e98d80dc05cae1698d1d8
- SHA512 2b6a85b15383dc53d85ab617fb37ac959d54bd0f4a2236b27f63404639e9069111fd7ac439658a2e348c71ccb347c834e808ad99aa9a6d4f86a5370b0ada7daa
- SSDEEP 49152:4vm22KmZWXqrJry+JVTZgLOycSSJ9wJZ4BlhGwLVT5kUvgJSgHT6ojkxFbxLWC3:gmJZWgry++6ycnJHXVLUjH5oxFbx
- TLSH T1CAF51243F39090E1C29552B86A9143D29736FC35AA0746937E8C231ECF277C6AF67B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_d0a6fdf99822e98e554779fc922bb57a_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_d0a6fdf99822e98e554779fc922bb57a_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_d0a6fdf99822e98e554779fc922bb57a_amadey_elex_smoke-loader
- Size 3.4MB
- SHA256 739b93ba6e359c95e7c18629f27dd339a2527d0e00c13884c6d4ada43669e7b6
- MD5 d0a6fdf99822e98e554779fc922bb57a
- SHA1 ae1446286d56518f553e98d80dc05cae1698d1d8
- SHA512 2b6a85b15383dc53d85ab617fb37ac959d54bd0f4a2236b27f63404639e9069111fd7ac439658a2e348c71ccb347c834e808ad99aa9a6d4f86a5370b0ada7daa
- SSDEEP 49152:4vm22KmZWXqrJry+JVTZgLOycSSJ9wJZ4BlhGwLVT5kUvgJSgHT6ojkxFbxLWC3:gmJZWgry++6ycnJHXVLUjH5oxFbx
- TLSH T1CAF51243F39090E1C29552B86A9143D29736FC35AA0746937E8C231ECF277C6AF67B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE