General
- Target 2026-07-31_ae018982c30cfd57f742b30aa5663d4a_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260731-vm1cfscm5t
- SHA256 9431477bba92b187ad06335419d645be0a44d653d08bff6358553949d5357136
- MD5 ae018982c30cfd57f742b30aa5663d4a
- SHA1 eea2bb9a4f239f4f67b33adf799fd866545fb9d2
- SHA512 16773cd1c844d5a8be9f4d8e31a12393f4c3bb6a10a454b5268c22d07ce70eec47611afd161446c97eff2c6ec9b87a29d6fdc20ec20f80bf168317f2d0a4bb3e
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP78gNlwiOgsfLPVi2OwgKp+97p96sHR:JRek9CkhN3oc/hf7VJDw7L
- TLSH T13694F1D672C5D036E19319334AA9CBB2293ABD70672E64C7B794BB6D6E713C18970303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_ae018982c30cfd57f742b30aa5663d4a_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_ae018982c30cfd57f742b30aa5663d4a_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_ae018982c30cfd57f742b30aa5663d4a_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 9431477bba92b187ad06335419d645be0a44d653d08bff6358553949d5357136
- MD5 ae018982c30cfd57f742b30aa5663d4a
- SHA1 eea2bb9a4f239f4f67b33adf799fd866545fb9d2
- SHA512 16773cd1c844d5a8be9f4d8e31a12393f4c3bb6a10a454b5268c22d07ce70eec47611afd161446c97eff2c6ec9b87a29d6fdc20ec20f80bf168317f2d0a4bb3e
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP78gNlwiOgsfLPVi2OwgKp+97p96sHR:JRek9CkhN3oc/hf7VJDw7L
- TLSH T13694F1D672C5D036E19319334AA9CBB2293ABD70672E64C7B794BB6D6E713C18970303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE