General
- Target 2026-07-31_df9cae7a9a838ff4e2bbca437999b66d_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260731-txbamsbp4x
- SHA256 a7e7e2dd2c8e728abd81a17433daf516e033362c6eadfd9443864ee1e0230e36
- MD5 df9cae7a9a838ff4e2bbca437999b66d
- SHA1 4e95e8ec0177bc03968e3afe9ba9c1f76a7dff62
- SHA512 9a6027cdcd6022d2f9b0a57b8f9fcaeff73724494418645239783be1255dedfe7a79b4da227c5cd22d79092552f11072afd93a08a7332bbca9e366193c6b4759
- SSDEEP 12288:JRek9CkhN3oc1pFQH4/XzVcWq1tF5+Coc:JRh9CkhNH1kH6cdfr+Coc
- TLSH T1F394E1E672C5D031E0E315335AE8C672293ABD31672A60DBB6A4B76D6E713C19E71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_df9cae7a9a838ff4e2bbca437999b66d_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_df9cae7a9a838ff4e2bbca437999b66d_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_df9cae7a9a838ff4e2bbca437999b66d_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 a7e7e2dd2c8e728abd81a17433daf516e033362c6eadfd9443864ee1e0230e36
- MD5 df9cae7a9a838ff4e2bbca437999b66d
- SHA1 4e95e8ec0177bc03968e3afe9ba9c1f76a7dff62
- SHA512 9a6027cdcd6022d2f9b0a57b8f9fcaeff73724494418645239783be1255dedfe7a79b4da227c5cd22d79092552f11072afd93a08a7332bbca9e366193c6b4759
- SSDEEP 12288:JRek9CkhN3oc1pFQH4/XzVcWq1tF5+Coc:JRh9CkhNH1kH6cdfr+Coc
- TLSH T1F394E1E672C5D031E0E315335AE8C672293ABD31672A60DBB6A4B76D6E713C19E71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE