General
- Target 2026-07-17_77b005845c3032cdaf52d506ec7320e1_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260717-2a4mnsfx2l
- SHA256 956bf534748dae985c7022183efb7d9c9e3f61641ea4466de43f6a62e16cbd29
- MD5 77b005845c3032cdaf52d506ec7320e1
- SHA1 6458ac25448c293b5656085042f3ddf886332376
- SHA512 c27b39b380b6bf5ea859b6df0a4ce2c6700aa58747ecff07f2d6ceed3e48a36b02c57044b83ed020464a7d3b02d7435ad0400284d3ebbc6470931cc8e22fab15
- SSDEEP 49152:Fvm22KmZWXqrJry+JGm5OHZuf7TJVKGM4wctedpqZL1LS5IDwLVT5kUvgJSgHT6z:5mJZWgry+w5S7dM/WjqVLUjH5oxFbxx
- TLSH T102E52381B795C262D08124F96483C3E7C9743F7C5525998B3FCE2B2FAC686F2A675243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_77b005845c3032cdaf52d506ec7320e1_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_77b005845c3032cdaf52d506ec7320e1_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_77b005845c3032cdaf52d506ec7320e1_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 956bf534748dae985c7022183efb7d9c9e3f61641ea4466de43f6a62e16cbd29
- MD5 77b005845c3032cdaf52d506ec7320e1
- SHA1 6458ac25448c293b5656085042f3ddf886332376
- SHA512 c27b39b380b6bf5ea859b6df0a4ce2c6700aa58747ecff07f2d6ceed3e48a36b02c57044b83ed020464a7d3b02d7435ad0400284d3ebbc6470931cc8e22fab15
- SSDEEP 49152:Fvm22KmZWXqrJry+JGm5OHZuf7TJVKGM4wctedpqZL1LS5IDwLVT5kUvgJSgHT6z:5mJZWgry+w5S7dM/WjqVLUjH5oxFbxx
- TLSH T102E52381B795C262D08124F96483C3E7C9743F7C5525998B3FCE2B2FAC686F2A675243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE