Overview

overview

10

Static

static

3

2026-07-25...op.exe

windows10-2004-x64

10

2026-07-25...op.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-07-25_eb7b49b151a2363dd5670110786ac268_amadey_elex_smoke-loader_stealc_stop
  • Size 20.7MB
  • Sample260725-e1k7pazekd
  • SHA256 8e48f5243a0afc8d87c77c4396613bae1132eee7fad55ce43807698d33a29da4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
snakebotdiscoveryexecutionsnakebot

Malware Config

Targets

    • Target
      2026-07-25_eb7b49b151a2363dd5670110786ac268_amadey_elex_smoke-loader_stealc_stop
    • Size 20.7MB
    • SHA256 8e48f5243a0afc8d87c77c4396613bae1132eee7fad55ce43807698d33a29da4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutionsnakebotsnakebot

    • Family: SnakeBOT

      SnakeBOT is a heavily obfuscated .NET downloader.

      snakebot

    • Contains SnakeBOT related strings

      snakebot

    • Detects executables containing possible sandbox analysis VM usernames

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks