General
- Target 2026-07-31_a9cf5c086535b3e06e3fbecf0e6677bb_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260731-hxwe2aef23
- SHA256 5f7e59de4743aff28a0bcc5971453d97f46a67285f8fe4c60a10997397999577
- MD5 a9cf5c086535b3e06e3fbecf0e6677bb
- SHA1 65330c8fc48c8d0fcb426999e9194197498076f7
- SHA512 ec2e1fbb4f0a7147bb0c7e6c9210abe3d7fcb733fe720a0353fad6296cdd9f29dbe0414bd85a7a7f6966200b785f2199b0e1e0330393e760455e85fd899d14b4
- SSDEEP 49152:Fvm22KmZWXqrJry+JG5BmMxGKEzEdDHq7cZLb697jwLVT5kUvgJSgHT6ojkxFbxx:5mJZWgry+svGl4O4/qQVLUjH5oxFbxx
- TLSH T115E52341B7C4C272E18225F96192C3EBC8753F7D46259DCB2FCD1A2EAC649E1B639243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_a9cf5c086535b3e06e3fbecf0e6677bb_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_a9cf5c086535b3e06e3fbecf0e6677bb_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a9cf5c086535b3e06e3fbecf0e6677bb_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 5f7e59de4743aff28a0bcc5971453d97f46a67285f8fe4c60a10997397999577
- MD5 a9cf5c086535b3e06e3fbecf0e6677bb
- SHA1 65330c8fc48c8d0fcb426999e9194197498076f7
- SHA512 ec2e1fbb4f0a7147bb0c7e6c9210abe3d7fcb733fe720a0353fad6296cdd9f29dbe0414bd85a7a7f6966200b785f2199b0e1e0330393e760455e85fd899d14b4
- SSDEEP 49152:Fvm22KmZWXqrJry+JG5BmMxGKEzEdDHq7cZLb697jwLVT5kUvgJSgHT6ojkxFbxx:5mJZWgry+svGl4O4/qQVLUjH5oxFbxx
- TLSH T115E52341B7C4C272E18225F96192C3EBC8753F7D46259DCB2FCD1A2EAC649E1B639243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE