General
- Target 2026-07-30_21cf5bbd5f784116797186724527c5fd_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260730-ed1c4acn4s
- SHA256 4fe82cfc519c563e26470fcd92139c794169169d1581f83c2d7ce2e5b0b5e13a
- MD5 21cf5bbd5f784116797186724527c5fd
- SHA1 b7c1de4465347ca317a91ce4017e8c367daa9df8
- SHA512 8b210ef7b4342f8a4415da7daeb00e8769e5a92f8833f97e680708e20c3e7016bbb75c6f51284fd7c4dbb3eac942748be08adb9383deadda68b89ef249539f4d
- SSDEEP 49152:SYp95kv1v/WF27LvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivxrvkcD+v49pN/3
- TLSH T196D522ED91E15219BC42211A3AD6FAE008F1E7563BBE38E3DFC32594953B19ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_21cf5bbd5f784116797186724527c5fd_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_21cf5bbd5f784116797186724527c5fd_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_21cf5bbd5f784116797186724527c5fd_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 4fe82cfc519c563e26470fcd92139c794169169d1581f83c2d7ce2e5b0b5e13a
- MD5 21cf5bbd5f784116797186724527c5fd
- SHA1 b7c1de4465347ca317a91ce4017e8c367daa9df8
- SHA512 8b210ef7b4342f8a4415da7daeb00e8769e5a92f8833f97e680708e20c3e7016bbb75c6f51284fd7c4dbb3eac942748be08adb9383deadda68b89ef249539f4d
- SSDEEP 49152:SYp95kv1v/WF27LvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivxrvkcD+v49pN/3
- TLSH T196D522ED91E15219BC42211A3AD6FAE008F1E7563BBE38E3DFC32594953B19ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1