Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
17/07/2026, 16:23
General
- Target 2026-07-17_ef711cb4d4d1685025a5e815e2877ac9_amadey_elex_smoke-loader.exe
- Size 6.4MB
- Sample260717-tv5fpsft6l
- SHA256 d060d92e7cc881a7340c0e4d2c148a79792948582e926cfd482d654da0cd8a57
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-17_ef711cb4d4d1685025a5e815e2877ac9_amadey_elex_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-17_ef711cb4d4d1685025a5e815e2877ac9_amadey_elex_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ACFF.tmp"C:\Users\Admin\AppData\Local\Temp\ACFF.tmp" --splashC:\Users\Admin\AppData\Local\Temp\2026-07-17_ef711cb4d4d1685025a5e815e2877ac9_amadey_elex_smoke-loader.exe B7BF5C9FBB9B991AC914193827DFB619CD2542D6CADCB96FDAD0BC07445FF279C504BAE24570F64A864D5DEC551B0725CCB567982721B401B5D024D4BCBF61952⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
ACFF.tmp
memory/1708-1-0x0000000000400000-0x0000000000A8F000-memory.dmp
memory/1708-0-0x0000000000721000-0x0000000000722000-memory.dmp
memory/1708-2-0x0000000000400000-0x0000000000A8F000-memory.dmp
memory/1708-3-0x0000000000400000-0x0000000000A8F000-memory.dmp
memory/1708-10-0x0000000000400000-0x0000000000A8F000-memory.dmp
memory/5080-11-0x0000000000400000-0x0000000000A8F000-memory.dmp
memory/5080-12-0x0000000000400000-0x0000000000A8F000-memory.dmp
memory/5080-13-0x0000000000400000-0x0000000000A8F000-memory.dmp