General
- Target 2026-07-30_6a6dd98cb9af1ba805030d04d27e32c5_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 383KB
- Sample260730-2dh55sgf23
- SHA256 dbe361dd69bd59babd7216518d434c4a6740f4ebbe6e4c0d9b3e0a265afcc592
- MD5 6a6dd98cb9af1ba805030d04d27e32c5
- SHA1 60beb6f1a7ad02d3e564896c45afd69730a71aa1
- SHA512 336d2b753fd938962e3c9a505c50ea6c05cc341ff5c03b39dd8a1e988e17253f38e6ee101cd2d4b5729c03ab9107d03942536c8cbce7bf0497e07fca0d322852
- SSDEEP 6144:S8efQ6QPJGcLbjg08fLsGH+revgLIAP1fXo1Epp1:76QPJGcE0rGereYdPcW
- TLSH T1C984AE217640D075E3AA033589A6E6F55A946E391394E48FF37C7E7A5A312C36B3320F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_6a6dd98cb9af1ba805030d04d27e32c5_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-07-30_6a6dd98cb9af1ba805030d04d27e32c5_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 383KB
- SHA256 dbe361dd69bd59babd7216518d434c4a6740f4ebbe6e4c0d9b3e0a265afcc592
- MD5 6a6dd98cb9af1ba805030d04d27e32c5
- SHA1 60beb6f1a7ad02d3e564896c45afd69730a71aa1
- SHA512 336d2b753fd938962e3c9a505c50ea6c05cc341ff5c03b39dd8a1e988e17253f38e6ee101cd2d4b5729c03ab9107d03942536c8cbce7bf0497e07fca0d322852
- SSDEEP 6144:S8efQ6QPJGcLbjg08fLsGH+revgLIAP1fXo1Epp1:76QPJGcE0rGereYdPcW
- TLSH T1C984AE217640D075E3AA033589A6E6F55A946E391394E48FF37C7E7A5A312C36B3320F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE