Overview

overview

7

Static

static

5

2026-07-28...op.exe

windows10-2004-x64

7

2026-07-28...op.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    132s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/07/2026, 22:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-28_98806fdb506ae720460fdc019b07a6f7_amadey_elex_smoke-loader_stop.exe
  • Size 7.8MB
  • Sample260728-2d36baar6v
  • SHA256 75e58aa6ba9a4e3dd12dc87fe518404761580c8387ebe755c5f391d1e24ffad2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 26 IoCs
  • Drops autorun.inf file 1 TTPs 1 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-28_98806fdb506ae720460fdc019b07a6f7_amadey_elex_smoke-loader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-28_98806fdb506ae720460fdc019b07a6f7_amadey_elex_smoke-loader_stop.exe"
    1⤵
    • Drops autorun.inf file
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2984
    • C:\Users\Admin\AppData\Local\Temp\IPMx2\setup.exe
      C:\Users\Admin\AppData\Local\Temp\IPMx2\setup.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:4396

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        IScrNB.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\IScrNB.bmp
        • Size 118KB
        • SHA256 3060fb9f8fc24a6176e33ee5799b92ffb55aa150d8ff163cb10e2d9570019553
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\ARA\resource.dll
        • Size 56KB
        • SHA256 3966769c23d5cde62ba37ab90136da3ca66df8eb722831b040a92f72e4330185
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\CHS\resource.dll
        • Size 52KB
        • SHA256 0509dd89b77c6300f34fb561e727ed55c26224d609f5051cb5ae8fe83bd6b88b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\CHT\resource.dll
        • Size 52KB
        • SHA256 a33a770609540f1810ddeac44bbbe6dff251e91d4dd62c229c2dfb6abf694a3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\CSY\resource.dll
        • Size 56KB
        • SHA256 6c5787338094f3c58eb12f02856b2fdfaef25c10a6cd1dfd4f949a4d64ac5b66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\DAN\resource.dll
        • Size 56KB
        • SHA256 a30bb4006722106f0b792fb435a4cc94ee4c5e4a5acd6838e94d1239906bfd62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\DEU\resource.dll
        • Size 60KB
        • SHA256 aa2078585d5c9af075d45dfad768636aa28f9fd958a8dd0e18123b461934d2a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\ELL\resource.dll
        • Size 60KB
        • SHA256 2e9c854fab862d7bb9748a667876e012b7f164daa4f7ee2749eea0f3102d112e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\ESP\resource.dll
        • Size 60KB
        • SHA256 7df34aec10fc7bd2bbc5f7f82b479c84c8063db6e429635f04052ad00fe897ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\FIN\resource.dll
        • Size 56KB
        • SHA256 cbd2659bb0318d9de992c18cd6062944bb6bd7acd15f039a418bb82471c9b876
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\FRA\resource.dll
        • Size 60KB
        • SHA256 871fb93f3fe828319a4a813c0c74865b7a7be1acd2aab5c4dea5667733933844
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\HEB\resource.dll
        • Size 56KB
        • SHA256 3258795fb93e806a24ad1b41f9b54b2876a18f3f048e5fe3c87ce1e38e0a4481
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\HUN\resource.dll
        • Size 56KB
        • SHA256 1b7783bf39b080df6aa030a883d3c419f6be0f3cd9d9408fe5fd9b5ac02ec44c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\ITA\resource.dll
        • Size 60KB
        • SHA256 0e5e7e248e665683c160f902a1bbff371a02da2d034b54174a93c7d210177259
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\JPN\resource.dll
        • Size 52KB
        • SHA256 147c3c6d7eaef137ad163d7a7fb24a038def73bd22c42989198ff48936b90955
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\KOR\resource.dll
        • Size 52KB
        • SHA256 12b9b02bf0a410ce9c634f2a27e9385b0283f276c14219e249fe42c5f1219222
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\NLD\resource.dll
        • Size 60KB
        • SHA256 fc525a94a076d5fa6586770fb4a1c4bddffebb3dad994b478432aa583e6f4f95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\NOR\resource.dll
        • Size 56KB
        • SHA256 a76cb91f5b905b8f2d67028f331ae92d76c4041f16fd1fbbd43caaea4fd63758
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\PLK\resource.dll
        • Size 56KB
        • SHA256 acfbbb4bdcd55282d25c842ef68d9ab41a93ad7a64c1c9fb1ead8eda538c2f9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\PTB\resource.dll
        • Size 56KB
        • SHA256 cd766415683abb9a6300e905b7995e996daf62c116820aabdacd92f7919d834e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\PTG\resource.dll
        • Size 60KB
        • SHA256 f5abfc590d865ed8f39a904a0afb07e7c12ec8310c6995507911ad504aac9b54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\RUS\resource.dll
        • Size 56KB
        • SHA256 39a7af51bcffb7a73eedc475a31603ec1d99b3d79846cc23a34921a48b9c3c1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\SKY\resource.dll
        • Size 56KB
        • SHA256 1ebc25242c5c4fea6c2162ecd355241cba55a824e0edd61d0c7719e8d92ffdf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\SLV\resource.dll
        • Size 56KB
        • SHA256 e79e74548a36cb001133328ffd4a271707d92a7f601a7f588d88d2722728c930
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\SVE\resource.dll
        • Size 56KB
        • SHA256 bd5ecc086e7b404c163be045e5d907be8e9e6864eb749e1e2dbef4b38d03c63e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\THA\resource.dll
        • Size 56KB
        • SHA256 a0ad43b4dfa6b379bc9c0a6042ae497c1ca536c9da6c9f401d5eed4d6e4d0ccd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Lang\TVWizard\TRK\resource.dll
        • Size 56KB
        • SHA256 6006ace5527be4cb849bc80e5884e2447baf1fe0d98a5b42c88450518508a1a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Setup.exe
        • Path C:\Users\Admin\AppData\Local\Temp\IPMx2\Setup.exe
        • Size 356KB
        • SHA256 77346103dc43f736806064d5b988e7bfc89eedeea110d2abe7d0659802182ece
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelTVWizard.log
        • Path C:\Windows\Temp\IntelTVWizard.log
        • Size 166B
        • SHA256 502e2f1da55923770d57f16ab0faf9f263ff4aaaa60071c817049afb1d7050bc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/2984-0-0x0000000000400000-0x0000000000BE9000-memory.dmp
        Download

        memory/2984-387-0x0000000000400000-0x0000000000BE9000-memory.dmp
        Download