General
- Target 2026-07-16_0b05fdd075cec2e6b12bb02fe819fcbe_amadey_elex_smoke-loader
- Size 1.7MB
- Sample260716-qfed7ad16q
- SHA256 ebcad5da8d4b85f930ad95518f59ea23c0d17313173b7e3665ca78de53e68c7b
- MD5 0b05fdd075cec2e6b12bb02fe819fcbe
- SHA1 26367e57a09c3dd1d225ff29495214206a831905
- SHA512 5a40c72a8b6fa90d9eeb65d24a5f173db96f962c0990cac1f1eccb3f3aa2178f95c3ea45f89b92b7959c659d8e7d12452b7fe0b8d13762bce3eae9a955fcbf33
- SSDEEP 49152:n8dNJ+0BgMup0pgwSEdCW1oT3frnTcokws15tRl+C26u37vTnYMQEIV95aGS+KLZ:8dNJ+0BgMup0pxaKWasX
- TLSH T1BF85AD10EB43D537F9E314B589FFD27A1834BA3503A651D373C8AC496A322E2793265B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_0b05fdd075cec2e6b12bb02fe819fcbe_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_0b05fdd075cec2e6b12bb02fe819fcbe_amadey_elex_smoke-loader
- Size 1.7MB
- SHA256 ebcad5da8d4b85f930ad95518f59ea23c0d17313173b7e3665ca78de53e68c7b
- MD5 0b05fdd075cec2e6b12bb02fe819fcbe
- SHA1 26367e57a09c3dd1d225ff29495214206a831905
- SHA512 5a40c72a8b6fa90d9eeb65d24a5f173db96f962c0990cac1f1eccb3f3aa2178f95c3ea45f89b92b7959c659d8e7d12452b7fe0b8d13762bce3eae9a955fcbf33
- SSDEEP 49152:n8dNJ+0BgMup0pgwSEdCW1oT3frnTcokws15tRl+C26u37vTnYMQEIV95aGS+KLZ:8dNJ+0BgMup0pxaKWasX
- TLSH T1BF85AD10EB43D537F9E314B589FFD27A1834BA3503A651D373C8AC496A322E2793265B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1