General
- Target 2026-07-28_88b6c2aaacc34c8e65fc6ca65ae906c1_amadey_elex_smoke-loader
- Size 11.9MB
- Sample260728-gclvesfc55
- SHA256 6001ae6e5094f2b87bb8c0c52182c33d5a1eb49ef963b93e1c138e405cf56b16
- MD5 88b6c2aaacc34c8e65fc6ca65ae906c1
- SHA1 9d0af34cf3b4765081b4a969ca6eb71730bc78c6
- SHA512 5f5c1b46161f0fcc2a3db6cf64f83645bc6051d095e5e79bb93c57ab9753bda68b92e503dc84df5583b81f6d9df7e32b708465f09fa582ab4f28aa01d0c653a6
- SSDEEP 196608:kmVf72alA1oMuWr45hrr2yqoLgKHz9CNXaYQp4lvCOLf7Fl2xvPn2JnYLc:77xueJWGhrr2yGSz9CNXNQCL7L2mJGc
- TLSH T159C63306B7D64737D09E073048B73B77873A7C614A71EA0E5726B84D2E732991BB2389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_88b6c2aaacc34c8e65fc6ca65ae906c1_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_88b6c2aaacc34c8e65fc6ca65ae906c1_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_88b6c2aaacc34c8e65fc6ca65ae906c1_amadey_elex_smoke-loader
- Size 11.9MB
- SHA256 6001ae6e5094f2b87bb8c0c52182c33d5a1eb49ef963b93e1c138e405cf56b16
- MD5 88b6c2aaacc34c8e65fc6ca65ae906c1
- SHA1 9d0af34cf3b4765081b4a969ca6eb71730bc78c6
- SHA512 5f5c1b46161f0fcc2a3db6cf64f83645bc6051d095e5e79bb93c57ab9753bda68b92e503dc84df5583b81f6d9df7e32b708465f09fa582ab4f28aa01d0c653a6
- SSDEEP 196608:kmVf72alA1oMuWr45hrr2yqoLgKHz9CNXaYQp4lvCOLf7Fl2xvPn2JnYLc:77xueJWGhrr2yGSz9CNXNQCL7L2mJGc
- TLSH T159C63306B7D64737D09E073048B73B77873A7C614A71EA0E5726B84D2E732991BB2389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory