General
- Target 2026-07-27_cf90b893fee5d2aec91d6aa8fc5529d1_amadey_elex_smoke-loader
- Size 3.4MB
- Sample260727-p1vfgaba68
- SHA256 4ed3fe450d4c568b2c5af1d600100cde7517c41f3ac3be74fa85f8be5cb99b6a
- MD5 cf90b893fee5d2aec91d6aa8fc5529d1
- SHA1 0b87cbb58a15248cd3ad1b075af5e3167ca15382
- SHA512 4d31ca8193382aa19dcb7ffbec657657fef55ecd1123d153bfb0a3749d85c9f5c6fe2e5663f3be1ca872dd1badf512ecd083443807d7e4da69bb73fc909dc2dd
- SSDEEP 49152:4vm22KmZWXqrJry+JVfI/d7vgzW7h7yxXIrUh7+nfTawLVT5kUvgJSgHT6ojkxFN:gmJZWgry+W7S2OwUh74lVLUjH5oxFbx
- TLSH T1D2F51243F79190E2C29552B9699143C2A736FC20AE0746837E8C231DCF577CAAF66F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_cf90b893fee5d2aec91d6aa8fc5529d1_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_cf90b893fee5d2aec91d6aa8fc5529d1_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_cf90b893fee5d2aec91d6aa8fc5529d1_amadey_elex_smoke-loader
- Size 3.4MB
- SHA256 4ed3fe450d4c568b2c5af1d600100cde7517c41f3ac3be74fa85f8be5cb99b6a
- MD5 cf90b893fee5d2aec91d6aa8fc5529d1
- SHA1 0b87cbb58a15248cd3ad1b075af5e3167ca15382
- SHA512 4d31ca8193382aa19dcb7ffbec657657fef55ecd1123d153bfb0a3749d85c9f5c6fe2e5663f3be1ca872dd1badf512ecd083443807d7e4da69bb73fc909dc2dd
- SSDEEP 49152:4vm22KmZWXqrJry+JVfI/d7vgzW7h7yxXIrUh7+nfTawLVT5kUvgJSgHT6ojkxFN:gmJZWgry+W7S2OwUh74lVLUjH5oxFbx
- TLSH T1D2F51243F79190E2C29552B9699143C2A736FC20AE0746837E8C231DCF577CAAF66F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE