Analysis
- max time kernel
149s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
15/07/2026, 04:36
General
- Target 2026-07-15_90c7063d350f6dee0a12dbc47d676bbc_amadey_elex_smoke-loader.exe
- Size 7.5MB
- Sample260715-e8a2pabx6j
- SHA256 d892db7f4d758c94aed3cfe44999b3c293da2af6646a23d90a4e6222d640cdb4
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
- Executes dropped EXE 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-15_90c7063d350f6dee0a12dbc47d676bbc_amadey_elex_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-15_90c7063d350f6dee0a12dbc47d676bbc_amadey_elex_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4D0D.tmp"C:\Users\Admin\AppData\Local\Temp\4D0D.tmp" --splashC:\Users\Admin\AppData\Local\Temp\2026-07-15_90c7063d350f6dee0a12dbc47d676bbc_amadey_elex_smoke-loader.exe D98C6EE6A40BEF7AD760012062072C82E3A973ACD868F1C26DA5EB80BD45E0DD9C74FFCE83A998C0E8015C2CFAEF973439DFB126EDF69F1FD21DFE41AD789EAF2⤵
- Deletes itself
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
4D0D.tmp
memory/1092-12-0x0000000000400000-0x0000000000BB3000-memory.dmp
memory/1092-13-0x0000000000400000-0x0000000000BB3000-memory.dmp
memory/2456-0-0x00000000005E6000-0x00000000005E7000-memory.dmp
memory/2456-1-0x0000000000400000-0x0000000000BB3000-memory.dmp
memory/2456-2-0x0000000000400000-0x0000000000BB3000-memory.dmp
memory/2456-3-0x0000000000400000-0x0000000000BB3000-memory.dmp
memory/2456-4-0x0000000000400000-0x0000000000BB3000-memory.dmp
memory/2456-11-0x0000000000400000-0x0000000000BB3000-memory.dmp