General
- Target 2026-07-20_0ea6e296ed97abd4a3cfdbe88053ba0a_amadey_elex_smoke-loader_stealc_stop
- Size 33.4MB
- Sample260720-mlbcyaey7m
- SHA256 ab9ff4fe1eeb2e98c3044b8a8a887b606f33b591500f3fc2ff42ef0a8c15319f
- MD5 0ea6e296ed97abd4a3cfdbe88053ba0a
- SHA1 bc95a95f3ee7c29abb836bf62db612f4385ba75e
- SHA512 4f840b5017aa6294e3467707db0410a5b7baf84a8e2658c00ed2de18c44678abdcd82d16dc0f4d59f3b2bf78f295be0cfb38572ca4c2a01dc9076b8216bec40d
- SSDEEP 786432:eB9+ZZLUjGbDcivFNZNXUJvRrzwOPoXU6cv:eBo/4SbFoFRrzxgk6s
- TLSH T1707733D0D28568E6C82771F1B83DDA61291F7E2E52B0191D36BAB91C52B3243ED27D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0ea6e296ed97abd4a3cfdbe88053ba0a_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0ea6e296ed97abd4a3cfdbe88053ba0a_amadey_elex_smoke-loader_stealc_stop
- Size 33.4MB
- SHA256 ab9ff4fe1eeb2e98c3044b8a8a887b606f33b591500f3fc2ff42ef0a8c15319f
- MD5 0ea6e296ed97abd4a3cfdbe88053ba0a
- SHA1 bc95a95f3ee7c29abb836bf62db612f4385ba75e
- SHA512 4f840b5017aa6294e3467707db0410a5b7baf84a8e2658c00ed2de18c44678abdcd82d16dc0f4d59f3b2bf78f295be0cfb38572ca4c2a01dc9076b8216bec40d
- SSDEEP 786432:eB9+ZZLUjGbDcivFNZNXUJvRrzwOPoXU6cv:eBo/4SbFoFRrzxgk6s
- TLSH T1707733D0D28568E6C82771F1B83DDA61291F7E2E52B0191D36BAB91C52B3243ED27D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)