General
- Target 2026-07-30_4caa7c60e0b4fd0a1edc6c8dd4913b43_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 383KB
- Sample260730-2gn6kagm3x
- SHA256 6ce86130a1b3d9b2d1dea654404604abc1cf5841278382cf3fb85f0e4833972d
- MD5 4caa7c60e0b4fd0a1edc6c8dd4913b43
- SHA1 5d0146f05bd16c55f7d642f95633d9224645bc67
- SHA512 26cf05be6450aa833512c4f0eeab5f10d93c372be599c641fdbf2e42b4bb486497a2108eae4e3425373881d6ff7d059544ed8b64328cfad84d548b9cc219da71
- SSDEEP 6144:S8efQ6QPJGcLbjg08fLsGH+revgLIAP1fXo1Epph:76QPJGcE0rGereYdPca
- TLSH T13D84AE217640D075E3AA033589A6E6F55A946E391394E48FF37C7E7A5A312C36B3320F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_4caa7c60e0b4fd0a1edc6c8dd4913b43_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-07-30_4caa7c60e0b4fd0a1edc6c8dd4913b43_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 383KB
- SHA256 6ce86130a1b3d9b2d1dea654404604abc1cf5841278382cf3fb85f0e4833972d
- MD5 4caa7c60e0b4fd0a1edc6c8dd4913b43
- SHA1 5d0146f05bd16c55f7d642f95633d9224645bc67
- SHA512 26cf05be6450aa833512c4f0eeab5f10d93c372be599c641fdbf2e42b4bb486497a2108eae4e3425373881d6ff7d059544ed8b64328cfad84d548b9cc219da71
- SSDEEP 6144:S8efQ6QPJGcLbjg08fLsGH+revgLIAP1fXo1Epph:76QPJGcE0rGereYdPca
- TLSH T13D84AE217640D075E3AA033589A6E6F55A946E391394E48FF37C7E7A5A312C36B3320F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE