General
- Target 2026-07-20_0c4c96807a1ddbb8166b1fe35310b797_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- Sample260720-mlwnwaey9p
- SHA256 88175156dad712996a7684bf6bf1ace42e3c0b301e43956ae1b81cd67785cf83
- MD5 0c4c96807a1ddbb8166b1fe35310b797
- SHA1 003fb84e8e2b67fb3c9ca4e813035ecd402bde56
- SHA512 5a5d4ab6f4b2a2b165bfe13a634a66ac4f79cad17876823ea91e68655d5523764cd4a7abe47ebce74f74428d4eb80248de513174ae2cdee4dccec95767746c53
- SSDEEP 49152:PYp95kv1jXohRkvhCcD0Tgy0LXu1qoTzmYvr6/T/:wp9ivhXmyvkcD+v49pN/7
- TLSH T113D522E851E15219BC42211A3AD6FAE018F5EB563BBE38E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0c4c96807a1ddbb8166b1fe35310b797_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0c4c96807a1ddbb8166b1fe35310b797_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0c4c96807a1ddbb8166b1fe35310b797_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- SHA256 88175156dad712996a7684bf6bf1ace42e3c0b301e43956ae1b81cd67785cf83
- MD5 0c4c96807a1ddbb8166b1fe35310b797
- SHA1 003fb84e8e2b67fb3c9ca4e813035ecd402bde56
- SHA512 5a5d4ab6f4b2a2b165bfe13a634a66ac4f79cad17876823ea91e68655d5523764cd4a7abe47ebce74f74428d4eb80248de513174ae2cdee4dccec95767746c53
- SSDEEP 49152:PYp95kv1jXohRkvhCcD0Tgy0LXu1qoTzmYvr6/T/:wp9ivhXmyvkcD+v49pN/7
- TLSH T113D522E851E15219BC42211A3AD6FAE018F5EB563BBE38E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1