General
- Target 2026-07-17_21c6a75286d6e58c71887ee5cc4186d8_amadey_elex_smoke-loader
- Size 3.9MB
- Sample260717-3nar7ads3v
- SHA256 e3df2dd46b843fc2adc59665821090f68fa5420fe2a1f35d759935e84995f836
- MD5 21c6a75286d6e58c71887ee5cc4186d8
- SHA1 56b37c1524f19f2ba5268491999a8f0e5bafef39
- SHA512 139d2962001d2552fafd2c25954158522a47a282f3653e1635cdd20e01f6507811f1037dd85470d7db91f65702099b7a90992031e0248b7ad20f6a3b5dc6180e
- SSDEEP 98304:lmJZWgry+LgHsgZhBFVl6MVLUjH5oxFbxxQ:l80MgZhBh/VUjZEd
- TLSH T1CE16E148C398CEB5D9C4433872B869C6B2362D92F4715ACCA9DF347FD95C0E16680BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_21c6a75286d6e58c71887ee5cc4186d8_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_21c6a75286d6e58c71887ee5cc4186d8_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_21c6a75286d6e58c71887ee5cc4186d8_amadey_elex_smoke-loader
- Size 3.9MB
- SHA256 e3df2dd46b843fc2adc59665821090f68fa5420fe2a1f35d759935e84995f836
- MD5 21c6a75286d6e58c71887ee5cc4186d8
- SHA1 56b37c1524f19f2ba5268491999a8f0e5bafef39
- SHA512 139d2962001d2552fafd2c25954158522a47a282f3653e1635cdd20e01f6507811f1037dd85470d7db91f65702099b7a90992031e0248b7ad20f6a3b5dc6180e
- SSDEEP 98304:lmJZWgry+LgHsgZhBFVl6MVLUjH5oxFbxxQ:l80MgZhBh/VUjZEd
- TLSH T1CE16E148C398CEB5D9C4433872B869C6B2362D92F4715ACCA9DF347FD95C0E16680BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE