General
- Target 2026-07-31_34377b5aeede44a6218433d59cb4e9e9_amadey_elex_icedid_smoke-loader_strictor_wannacry
- Size 464KB
- Sample260731-dtw5yabh86
- SHA256 745be0d98ae797da55c7d60cf4220dce7606d13d90604e28d66e08310d4580f4
- MD5 34377b5aeede44a6218433d59cb4e9e9
- SHA1 5e915d30f97e943e061a0fe07b49c9cfdcd184cc
- SHA512 cb065f71bc2ac8ef3b30bf3a479c597ca8a307c9ade30a2b0ca3979e26ec9ab5e406318856b4ebf5de15a26ef8b091e12a9bebbbab923fcd5edf5cc50f478157
- SSDEEP 6144:E+sA4cO1nVqHSYM0CCVs3BDaybDlDfPOUWn7HHzUuHNEoMfZrxA5+sA4cO1nVqHC:EJAFEYLV4D7VOh7nzt3U9A5JAFRYLVZ
- TLSH T1E8A4BE133AD2C872F5664572499987AE6373BD206B2CCDC327D43E2DBE315929E29307
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_34377b5aeede44a6218433d59cb4e9e9_amadey_elex_icedid_smoke-loader_strictor_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_34377b5aeede44a6218433d59cb4e9e9_amadey_elex_icedid_smoke-loader_strictor_wannacry.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_34377b5aeede44a6218433d59cb4e9e9_amadey_elex_icedid_smoke-loader_strictor_wannacry
- Size 464KB
- SHA256 745be0d98ae797da55c7d60cf4220dce7606d13d90604e28d66e08310d4580f4
- MD5 34377b5aeede44a6218433d59cb4e9e9
- SHA1 5e915d30f97e943e061a0fe07b49c9cfdcd184cc
- SHA512 cb065f71bc2ac8ef3b30bf3a479c597ca8a307c9ade30a2b0ca3979e26ec9ab5e406318856b4ebf5de15a26ef8b091e12a9bebbbab923fcd5edf5cc50f478157
- SSDEEP 6144:E+sA4cO1nVqHSYM0CCVs3BDaybDlDfPOUWn7HHzUuHNEoMfZrxA5+sA4cO1nVqHC:EJAFEYLV4D7VOh7nzt3U9A5JAFRYLVZ
- TLSH T1E8A4BE133AD2C872F5664572499987AE6373BD206B2CCDC327D43E2DBE315929E29307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Drops file in System32 directory