General
- Target 2026-07-17_e4f4ccec8a92db873cac6120addb8971_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260717-tx4l7afv4l
- SHA256 caa1ff6b73b8cfade1a299549520fda224d2dc9f69e19866be5978e1fe70e968
- MD5 e4f4ccec8a92db873cac6120addb8971
- SHA1 195f79fa379e533209df4c95e812b3c4d1e128fe
- SHA512 302be1eed4db734661ec11e5d96c048812bfd8e950573e05769d3958b8434381e1ed1c4bfec5d02a6e20602f3c848f57c70ffc8115ceddddaf4b4f5faefde71d
- SSDEEP 98304:NmJZWgry+ZHqMTDWfC76cfY9l8objl2V8lVLUjH5oxFbxP:N8N5CfTcfY9ldbjnlVUjZEdP
- TLSH T18AE52351BBD482A2D0C15AF8649383EB9D743F784426594B2FCC1A6FDCDC8E5663D382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_e4f4ccec8a92db873cac6120addb8971_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_e4f4ccec8a92db873cac6120addb8971_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_e4f4ccec8a92db873cac6120addb8971_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 caa1ff6b73b8cfade1a299549520fda224d2dc9f69e19866be5978e1fe70e968
- MD5 e4f4ccec8a92db873cac6120addb8971
- SHA1 195f79fa379e533209df4c95e812b3c4d1e128fe
- SHA512 302be1eed4db734661ec11e5d96c048812bfd8e950573e05769d3958b8434381e1ed1c4bfec5d02a6e20602f3c848f57c70ffc8115ceddddaf4b4f5faefde71d
- SSDEEP 98304:NmJZWgry+ZHqMTDWfC76cfY9l8objl2V8lVLUjH5oxFbxP:N8N5CfTcfY9ldbjnlVUjZEdP
- TLSH T18AE52351BBD482A2D0C15AF8649383EB9D743F784426594B2FCC1A6FDCDC8E5663D382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE