General
- Target 2026-07-29_3c0cfe11f45196dec656429403c0a9e6_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260729-wkllyscq2w
- SHA256 b525ac85a9d9a81c5328428e23a969cff1af762caecefda5eabb102a597a641c
- MD5 3c0cfe11f45196dec656429403c0a9e6
- SHA1 c30667650b3164b6d8c69edc57161499d75e3b5a
- SHA512 1918835a4c4cf2303a881c110d726b94d0b20546f41fc9cd2b65cdb414808d6cc7600ef66849c3101610bb2b1720cbc2932ea79ab0698dd0d913bcc5b3994275
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPQbISAD40SpK/bAqqyq4s0/dXpZkoDXYeQb1sHRu:JRek9CkhN3ocHbISsttWH4zZ5LYeQbqY
- TLSH T1AE94E1E672C5D031E0E305331AA8C6B1293ABDB06B2A51C7B794BB6D6E713D19E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_3c0cfe11f45196dec656429403c0a9e6_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_3c0cfe11f45196dec656429403c0a9e6_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_3c0cfe11f45196dec656429403c0a9e6_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 b525ac85a9d9a81c5328428e23a969cff1af762caecefda5eabb102a597a641c
- MD5 3c0cfe11f45196dec656429403c0a9e6
- SHA1 c30667650b3164b6d8c69edc57161499d75e3b5a
- SHA512 1918835a4c4cf2303a881c110d726b94d0b20546f41fc9cd2b65cdb414808d6cc7600ef66849c3101610bb2b1720cbc2932ea79ab0698dd0d913bcc5b3994275
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPQbISAD40SpK/bAqqyq4s0/dXpZkoDXYeQb1sHRu:JRek9CkhN3ocHbISsttWH4zZ5LYeQbqY
- TLSH T1AE94E1E672C5D031E0E305331AA8C6B1293ABDB06B2A51C7B794BB6D6E713D19E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE