General
- Target 2026-07-22_d3f8a3a5bd52e23458751445a9d91bb3_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260722-xt65paba96
- SHA256 a6b89999977d8e4af7b3953ea6205f3409c45606eede74507363a5b8272a55c3
- MD5 d3f8a3a5bd52e23458751445a9d91bb3
- SHA1 9a4cd029c5bfb9cae77746717cdba042820cf581
- SHA512 af6235ca6b0e4611f1e719a4291ff28bde0818a9f45afd82d9a70eabe9822b01098071993e2af89d849c485398218d97fd55fc2431d4bf41d54ee1a31e7f033c
- SSDEEP 98304:5mJZWgry+5MrfiVOUjNcRvVLUjH5oxFbxx:58DOGNcxVUjZEdx
- TLSH T13FE52340FBC5C372D08161F964D243EB95383E3D46169E8B2FCD2B2E9CA98F27675642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_d3f8a3a5bd52e23458751445a9d91bb3_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_d3f8a3a5bd52e23458751445a9d91bb3_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_d3f8a3a5bd52e23458751445a9d91bb3_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 a6b89999977d8e4af7b3953ea6205f3409c45606eede74507363a5b8272a55c3
- MD5 d3f8a3a5bd52e23458751445a9d91bb3
- SHA1 9a4cd029c5bfb9cae77746717cdba042820cf581
- SHA512 af6235ca6b0e4611f1e719a4291ff28bde0818a9f45afd82d9a70eabe9822b01098071993e2af89d849c485398218d97fd55fc2431d4bf41d54ee1a31e7f033c
- SSDEEP 98304:5mJZWgry+5MrfiVOUjNcRvVLUjH5oxFbxx:58DOGNcxVUjZEdx
- TLSH T13FE52340FBC5C372D08161F964D243EB95383E3D46169E8B2FCD2B2E9CA98F27675642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE