General
- Target 2026-07-27_2671735b3690f840c941f0e9cd6f795f_amadey_elex_smoke-loader_stealc_stop
- Size 18.0MB
- Sample260727-edp75avflc
- SHA256 3f9ccd37b479f4eaa7510369c7bd4bc685af60a0f4c38fd1bbfaef8b57ba8604
- MD5 2671735b3690f840c941f0e9cd6f795f
- SHA1 c37bac7db40f8f3b7dfe2bb6a5c194a62587b452
- SHA512 99d100cf99c53a6d67a6312f8480b41b062421dce6685c70f18a86fd474ddf1035ffe1859c1ca612e692009ea2285970db0189e3f92c607c30b2c943468bbbd1
- SSDEEP 393216:eo6FUr7uTq7SXkUGwQUjGhVXXzcMhYsZQJ6U+5DFViNd:eh9+ZZLUjGbDcivFNZo
- TLSH T116173390D285A8E6D82771F1AC39DD61291FBE2E5274181D36BA782C5173283EC77E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_2671735b3690f840c941f0e9cd6f795f_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_2671735b3690f840c941f0e9cd6f795f_amadey_elex_smoke-loader_stealc_stop
- Size 18.0MB
- SHA256 3f9ccd37b479f4eaa7510369c7bd4bc685af60a0f4c38fd1bbfaef8b57ba8604
- MD5 2671735b3690f840c941f0e9cd6f795f
- SHA1 c37bac7db40f8f3b7dfe2bb6a5c194a62587b452
- SHA512 99d100cf99c53a6d67a6312f8480b41b062421dce6685c70f18a86fd474ddf1035ffe1859c1ca612e692009ea2285970db0189e3f92c607c30b2c943468bbbd1
- SSDEEP 393216:eo6FUr7uTq7SXkUGwQUjGhVXXzcMhYsZQJ6U+5DFViNd:eh9+ZZLUjGbDcivFNZo
- TLSH T116173390D285A8E6D82771F1AC39DD61291FBE2E5274181D36BA782C5173283EC77E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)