7e3f88bdf97942e1d76b37d5118b63c247b6b710fbd89b2db6a75044094ef8a4

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 06:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-18_b041681b51e5e09ca53069a1d51dd518_amadey_elex_smoke-loader.exe
Size 372KB
Sample260718-he2t4aa12l
SHA256 7e3f88bdf97942e1d76b37d5118b63c247b6b710fbd89b2db6a75044094ef8a4
MD5 b041681b51e5e09ca53069a1d51dd518
SHA1 8bc6c19b60396f2cd2787c3a4934a4062d970d21
SHA512 1785cd07ea37f1b0dea48fb8426b4a817759af618fe0ed1fd9100dac45f2783d1b05df8b15608de731582bd6152a0b8b22cf89760c6b96c0beb521a477868517
SSDEEP 3072:NjFJm5EFQC1MSlbC8CND0U2DxKxn4nqv4944xUOAg0FuDs1gKfRY5IK+ORfZZ7Iy:NXmKFZ1Mo4F2gxKqMAOw13Cb+O3CJU
TLSH
T15C846B62708ED072D07217346C29DBA1C53D7D700E658A6BF3B4F79E2E741CEA522A72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1840	4628	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-18_b041681b51e5e09ca53069a1d51dd518_amadey_elex_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_b041681b51e5e09ca53069a1d51dd518_amadey_elex_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_b041681b51e5e09ca53069a1d51dd518_amadey_elex_smoke-loader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4628
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4628 -s 284
  2⤵
  - Program crash
  PID:1840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4628 -ip 4628
1⤵
PID:4124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads