General
- Target 2026-07-31_65eacc187d56f339833e1b43124e0181_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260731-wpp5yaee47
- SHA256 7a3fe175804fe91685acd2ffd2c486e04042c7314fbd74197abe4a866fea7785
- MD5 65eacc187d56f339833e1b43124e0181
- SHA1 89e84f04445ddf26ddc39e453e2fcecd5ff7d882
- SHA512 8caf4a5dfbdc9145d1041d03506139c18740de4a62e6c11da997090093c03af6c950fd08195a8ad304761d499f38349e2da326e7de25c1c6b3e7ecc7d60d1d46
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPE8UWOAKv75h2K+UKnsBKRmsHR:JRek9CkhN3ocG8v75hb+UKnqc
- TLSH T1CA94E1E672D5D032F1A315324EA9C672293ABD70672A60C7BB94BB7C6E713C19971303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_65eacc187d56f339833e1b43124e0181_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_65eacc187d56f339833e1b43124e0181_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_65eacc187d56f339833e1b43124e0181_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 7a3fe175804fe91685acd2ffd2c486e04042c7314fbd74197abe4a866fea7785
- MD5 65eacc187d56f339833e1b43124e0181
- SHA1 89e84f04445ddf26ddc39e453e2fcecd5ff7d882
- SHA512 8caf4a5dfbdc9145d1041d03506139c18740de4a62e6c11da997090093c03af6c950fd08195a8ad304761d499f38349e2da326e7de25c1c6b3e7ecc7d60d1d46
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPE8UWOAKv75h2K+UKnsBKRmsHR:JRek9CkhN3ocG8v75hb+UKnqc
- TLSH T1CA94E1E672D5D032F1A315324EA9C672293ABD70672A60C7BB94BB7C6E713C19971303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE