General
- Target 2026-07-13_90e5c82fc97b0fb883deedf24b0850c0_amadey_elex_smoke-loader
- Size 3.4MB
- Sample260714-bb59sabx9m
- SHA256 d330cfb87ac7c93f342f7b7bd8aae2cca2129115c666c7442ba554d4456f76fd
- MD5 90e5c82fc97b0fb883deedf24b0850c0
- SHA1 588b75c6fbb8e66eb8f51fdbe31a2204d4b21de5
- SHA512 696e9cb659d5a88fec5ae7d184b186d4c4e9c0950134735f4fe2719228a70565de58a73864ad2290a0fc07f4f5787a865ba79fc118c207611fe3c14a13295d80
- SSDEEP 98304:gmJZWgry+X0Pmf3sHK+VOl+kFeVeAIeuVLUjH5oxFbx:g8MPFH9VOl+kMKVUjZEd
- TLSH T1BCF51243F79190E1C25512B86D9143C69736FC65AE0746833E8C231ECF63BC6AF66B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_90e5c82fc97b0fb883deedf24b0850c0_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_90e5c82fc97b0fb883deedf24b0850c0_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_90e5c82fc97b0fb883deedf24b0850c0_amadey_elex_smoke-loader
- Size 3.4MB
- SHA256 d330cfb87ac7c93f342f7b7bd8aae2cca2129115c666c7442ba554d4456f76fd
- MD5 90e5c82fc97b0fb883deedf24b0850c0
- SHA1 588b75c6fbb8e66eb8f51fdbe31a2204d4b21de5
- SHA512 696e9cb659d5a88fec5ae7d184b186d4c4e9c0950134735f4fe2719228a70565de58a73864ad2290a0fc07f4f5787a865ba79fc118c207611fe3c14a13295d80
- SSDEEP 98304:gmJZWgry+X0Pmf3sHK+VOl+kFeVeAIeuVLUjH5oxFbx:g8MPFH9VOl+kMKVUjZEd
- TLSH T1BCF51243F79190E1C25512B86D9143C69736FC65AE0746833E8C231ECF63BC6AF66B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE