General
- Target 2026-07-28_a3e282f3e33c11c8660d2695847417be_amadey_elex_smoke-loader
- Size 14.6MB
- Sample260728-e686psar9x
- SHA256 cc421f4b22a36888891c64e45d003f18e42396e4a6fcfb77bbf94e783c8e642b
- MD5 a3e282f3e33c11c8660d2695847417be
- SHA1 05d6215a96b21d23c87e0f8ea82c5e51b58d6bff
- SHA512 310c2a0ffe8bc3025fa08c3b31fe7bd0578db328882e0827c239c85aa0e9d6f1aeba44993bcf7b7a2bd3d7aa1d54e136b05e2f5bc278525be20769db4ceca477
- SSDEEP 393216:OeJWGhrr2GcT9nKF/jwOlhjriPt1b+yOAVZiqUz:yGhwKF/jXRkt1b+yhZiqUz
- TLSH T10EF63306B286C872C550167164771BFA9B313D12FE25DC6A6368BECD2CF13D119BA2CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_a3e282f3e33c11c8660d2695847417be_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_a3e282f3e33c11c8660d2695847417be_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_a3e282f3e33c11c8660d2695847417be_amadey_elex_smoke-loader
- Size 14.6MB
- SHA256 cc421f4b22a36888891c64e45d003f18e42396e4a6fcfb77bbf94e783c8e642b
- MD5 a3e282f3e33c11c8660d2695847417be
- SHA1 05d6215a96b21d23c87e0f8ea82c5e51b58d6bff
- SHA512 310c2a0ffe8bc3025fa08c3b31fe7bd0578db328882e0827c239c85aa0e9d6f1aeba44993bcf7b7a2bd3d7aa1d54e136b05e2f5bc278525be20769db4ceca477
- SSDEEP 393216:OeJWGhrr2GcT9nKF/jwOlhjriPt1b+yOAVZiqUz:yGhwKF/jXRkt1b+yhZiqUz
- TLSH T10EF63306B286C872C550167164771BFA9B313D12FE25DC6A6368BECD2CF13D119BA2CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.