General
- Target 2026-07-28_74ac0ecdc8a1f85c1aec2793c277acc6_amadey_elex_smoke-loader_stealc_stop
- Size 247KB
- Sample260728-lyc7matfmc
- SHA256 31d3e0702dab1658631cb76356b0725f3752c1bd841569b23888f5ce7e52b97b
- MD5 74ac0ecdc8a1f85c1aec2793c277acc6
- SHA1 02c9b34d951a3ed17c62a5b7294c074967fe7c9f
- SHA512 691517b8070ddaa53766d53d45d93ac14e27fa157b8bd1cde1e76db2f84f46ac194c4d31b7abd61ddf1820ea03369159fedebd98721b39ff43fe4bd7559bf5e8
- SSDEEP 3072:vQLWOnFiCnkIDSrySPnhl0Cj/irN833f+y7bQ6wvCIWf2JjBX+ZfBHyD:IACTD4Pbn3f+yfwKIW+fcfBHyD
- TLSH T12934F7BD2992FC3DD421C03BC96486F166686D28FD1E65D7A7E13E29353E9A2C31D203
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_74ac0ecdc8a1f85c1aec2793c277acc6_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_74ac0ecdc8a1f85c1aec2793c277acc6_amadey_elex_smoke-loader_stealc_stop
- Size 247KB
- SHA256 31d3e0702dab1658631cb76356b0725f3752c1bd841569b23888f5ce7e52b97b
- MD5 74ac0ecdc8a1f85c1aec2793c277acc6
- SHA1 02c9b34d951a3ed17c62a5b7294c074967fe7c9f
- SHA512 691517b8070ddaa53766d53d45d93ac14e27fa157b8bd1cde1e76db2f84f46ac194c4d31b7abd61ddf1820ea03369159fedebd98721b39ff43fe4bd7559bf5e8
- SSDEEP 3072:vQLWOnFiCnkIDSrySPnhl0Cj/irN833f+y7bQ6wvCIWf2JjBX+ZfBHyD:IACTD4Pbn3f+yfwKIW+fcfBHyD
- TLSH T12934F7BD2992FC3DD421C03BC96486F166686D28FD1E65D7A7E13E29353E9A2C31D203
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.