General
- Target 2026-07-29_a5e171cdd0fa778693eadcd9cf26c579_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260729-ymdp8ser3y
- SHA256 7da57ceef4d16fc286bcae252e3afe3e34194e4effb1047d0ef1041372e078dd
- MD5 a5e171cdd0fa778693eadcd9cf26c579
- SHA1 4740852fee2efefd1116c3cc362e1567d425d5df
- SHA512 37e38fc3207ad8786b735327842270bf1f45fa8b9986d14df97dbcfe0fcd2b469ac02a01d958d854c71a64a833ca0b22d97dc89fecbe71fb5665b5308efe7642
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPCar2NDqpppvBTwV+W8n1SWU1gGWchbisHR:JRek9CkhN3ocpxev31Uf1H
- TLSH T1E094E0E672C5D032F0D315335AE9C6A1293ABE715B2A60C7B694BB6C6E713C19E71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a5e171cdd0fa778693eadcd9cf26c579_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a5e171cdd0fa778693eadcd9cf26c579_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a5e171cdd0fa778693eadcd9cf26c579_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 7da57ceef4d16fc286bcae252e3afe3e34194e4effb1047d0ef1041372e078dd
- MD5 a5e171cdd0fa778693eadcd9cf26c579
- SHA1 4740852fee2efefd1116c3cc362e1567d425d5df
- SHA512 37e38fc3207ad8786b735327842270bf1f45fa8b9986d14df97dbcfe0fcd2b469ac02a01d958d854c71a64a833ca0b22d97dc89fecbe71fb5665b5308efe7642
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPCar2NDqpppvBTwV+W8n1SWU1gGWchbisHR:JRek9CkhN3ocpxev31Uf1H
- TLSH T1E094E0E672C5D032F0D315335AE9C6A1293ABE715B2A60C7B694BB6C6E713C19E71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE