General
- Target 2026-07-27_d564d97ebc54e662b20acad57ed4eec8_amadey_elex_smoke-loader_stealc_stop
- Size 37.9MB
- Sample260728-adghrstene
- SHA256 8c77dc06cab027cff736015168c95cdf6789e078f060d2a9f0c2756c9ae498d6
- MD5 d564d97ebc54e662b20acad57ed4eec8
- SHA1 3e0f7044fa6d36664303c4d0cebf61ab4bda23ee
- SHA512 aa943e75b1376f7ce697a13e6d3f98bda66e3f4ec5cc09879ad1b63502a0b3b4237107f7276b188aa5689422cc6c3f96d6a2b1d012b6be1c0c7d6e31e1fe003f
- SSDEEP 786432:e8UYojZPNFYPtBBFD0nE9+ZZLUjGbDcivFNZ4:e8UxqFBnRo/4SbFK
- TLSH T1B69733D0D19AA8E1C81775F16C7DD961290BBE2E6174191E36BB782CA173183EC2BD0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_d564d97ebc54e662b20acad57ed4eec8_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_d564d97ebc54e662b20acad57ed4eec8_amadey_elex_smoke-loader_stealc_stop
- Size 37.9MB
- SHA256 8c77dc06cab027cff736015168c95cdf6789e078f060d2a9f0c2756c9ae498d6
- MD5 d564d97ebc54e662b20acad57ed4eec8
- SHA1 3e0f7044fa6d36664303c4d0cebf61ab4bda23ee
- SHA512 aa943e75b1376f7ce697a13e6d3f98bda66e3f4ec5cc09879ad1b63502a0b3b4237107f7276b188aa5689422cc6c3f96d6a2b1d012b6be1c0c7d6e31e1fe003f
- SSDEEP 786432:e8UYojZPNFYPtBBFD0nE9+ZZLUjGbDcivFNZ4:e8UxqFBnRo/4SbFK
- TLSH T1B69733D0D19AA8E1C81775F16C7DD961290BBE2E6174191E36BB782CA173183EC2BD0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)