General
- Target 2026-07-17_dbf03b0b4f6bad2bde67ed825d21f987_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260717-ty3fhsfv6n
- SHA256 157c4535f2e20c34ced54c9e79721ef1d4065bdb78848620b2e692eb93c29b1a
- MD5 dbf03b0b4f6bad2bde67ed825d21f987
- SHA1 75e17374f6ac894317dd981ab9062dd836136023
- SHA512 0188127bdb72e3f98509abee8b6d7b05d0aa85b02cfac15002a48dc24b8bad0b70ec6bd7b3f4fca908477d354ee162fa85c5de48e9b8dfddab94e8af3dfa8653
- SSDEEP 49152:Bvm22KmZWXqrJry+JGy+//SsrBwnxf/DPHx/GvR9t3YwLVT5kUvgJSgHT6ojkxF9:NmJZWgry+I/VrExf/rg9VLUjH5oxFbxP
- TLSH T1F8E52380B79482B2D0866AF554A387D78DB47F7C0525994B2FCD1A2F9CB88F1627D383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_dbf03b0b4f6bad2bde67ed825d21f987_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_dbf03b0b4f6bad2bde67ed825d21f987_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_dbf03b0b4f6bad2bde67ed825d21f987_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 157c4535f2e20c34ced54c9e79721ef1d4065bdb78848620b2e692eb93c29b1a
- MD5 dbf03b0b4f6bad2bde67ed825d21f987
- SHA1 75e17374f6ac894317dd981ab9062dd836136023
- SHA512 0188127bdb72e3f98509abee8b6d7b05d0aa85b02cfac15002a48dc24b8bad0b70ec6bd7b3f4fca908477d354ee162fa85c5de48e9b8dfddab94e8af3dfa8653
- SSDEEP 49152:Bvm22KmZWXqrJry+JGy+//SsrBwnxf/DPHx/GvR9t3YwLVT5kUvgJSgHT6ojkxF9:NmJZWgry+I/VrExf/rg9VLUjH5oxFbxP
- TLSH T1F8E52380B79482B2D0866AF554A387D78DB47F7C0525994B2FCD1A2F9CB88F1627D383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE