General
- Target 2026-07-27_664b14e821cf3fb35b2fc253b14a2381_amadey_elex_smoke-loader_stealc_stop
- Size 33.4MB
- Sample260728-alv15athla
- SHA256 4ecd35f8c8596577695eaeb9fb9415c2b71f6bddcb00383c30bfee385cdfccce
- MD5 664b14e821cf3fb35b2fc253b14a2381
- SHA1 c3de885fa5cedc553590804eba88757b2dbece9f
- SHA512 912817223999ca93e120660c6ad0cb1abb19d3c77058a856c9640f390b89fb270564fc1fc310dc0c02bad108116fbf81a9c436efde61dc5eeba7e48c5ede712e
- SSDEEP 786432:egXUJvRrzwOPoXU6cc9+ZZLUjGbDcivFNZd:e7FRrzxgk6ho/4SbFP
- TLSH T10F7733D0D28568E6C82771F1B83DDA61291F7E2E52B0191D36BAB91C52B3243ED27D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_664b14e821cf3fb35b2fc253b14a2381_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_664b14e821cf3fb35b2fc253b14a2381_amadey_elex_smoke-loader_stealc_stop
- Size 33.4MB
- SHA256 4ecd35f8c8596577695eaeb9fb9415c2b71f6bddcb00383c30bfee385cdfccce
- MD5 664b14e821cf3fb35b2fc253b14a2381
- SHA1 c3de885fa5cedc553590804eba88757b2dbece9f
- SHA512 912817223999ca93e120660c6ad0cb1abb19d3c77058a856c9640f390b89fb270564fc1fc310dc0c02bad108116fbf81a9c436efde61dc5eeba7e48c5ede712e
- SSDEEP 786432:egXUJvRrzwOPoXU6cc9+ZZLUjGbDcivFNZd:e7FRrzxgk6ho/4SbFP
- TLSH T10F7733D0D28568E6C82771F1B83DDA61291F7E2E52B0191D36BAB91C52B3243ED27D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)