General
- Target 2026-07-25_cf8362d377dd3e27f8db0a491100225e_amadey_elex_smoke-loader_stealc_tofsee
- Size 227KB
- Sample260725-dftsnafe36
- SHA256 b178a9329fd64ea6ee3cd5d4f2dbee6182f4d8bef6c04807020153bd294b3acc
- MD5 cf8362d377dd3e27f8db0a491100225e
- SHA1 880e739bd5c6dfa8123be60ec8bf4b9d672b3fe3
- SHA512 70f85b1091e3cb7174a2512e65cb3c9fdd96778caecd457e096651fa7c52570d31c1286d69fb029e73a17b0369d11eecccd936b40a3e7bd6388b4c583c115b1a
- SSDEEP 6144:QBC4T359LKgsblsifZhptKBuX3vOir6ozN4S:QBCubL1sb2ifptKYX3r5
- TLSH T1D0348D36B69280B3D8BB297254FDAF667C7CE942076440C3B7540F691E143E22E3938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-25_cf8362d377dd3e27f8db0a491100225e_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-25_cf8362d377dd3e27f8db0a491100225e_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-25_cf8362d377dd3e27f8db0a491100225e_amadey_elex_smoke-loader_stealc_tofsee
- Size 227KB
- SHA256 b178a9329fd64ea6ee3cd5d4f2dbee6182f4d8bef6c04807020153bd294b3acc
- MD5 cf8362d377dd3e27f8db0a491100225e
- SHA1 880e739bd5c6dfa8123be60ec8bf4b9d672b3fe3
- SHA512 70f85b1091e3cb7174a2512e65cb3c9fdd96778caecd457e096651fa7c52570d31c1286d69fb029e73a17b0369d11eecccd936b40a3e7bd6388b4c583c115b1a
- SSDEEP 6144:QBC4T359LKgsblsifZhptKBuX3vOir6ozN4S:QBCubL1sb2ifptKYX3r5
- TLSH T1D0348D36B69280B3D8BB297254FDAF667C7CE942076440C3B7540F691E143E22E3938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.