General
- Target 2026-07-31_5f54a2f09268c114ef131f1853db3bd0_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260731-ws2cdadn3t
- SHA256 00621604fa133e10e924f91e401d146539bc7939a7ad54bb4bb7590a7044068d
- MD5 5f54a2f09268c114ef131f1853db3bd0
- SHA1 c05a1d9a1eef693f5a448b68c4c0215f772edd1c
- SHA512 c420730c06f179022326504746fc7bd09d8e277654d7abeb88b7b095310d7957c20c8b06616a7f345aeaea84a9f17a6c686e611f7bae950906bb70731e8c532a
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPEAejmZ0CliVLEEtQQhbisHRu:JRek9CkhN3ocpt34UEqXY
- TLSH T10594E1E672C4D032E0E315335AA9C6B1293ABD70672A60C7B798B76D6E713C19E75303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_5f54a2f09268c114ef131f1853db3bd0_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_5f54a2f09268c114ef131f1853db3bd0_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_5f54a2f09268c114ef131f1853db3bd0_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 00621604fa133e10e924f91e401d146539bc7939a7ad54bb4bb7590a7044068d
- MD5 5f54a2f09268c114ef131f1853db3bd0
- SHA1 c05a1d9a1eef693f5a448b68c4c0215f772edd1c
- SHA512 c420730c06f179022326504746fc7bd09d8e277654d7abeb88b7b095310d7957c20c8b06616a7f345aeaea84a9f17a6c686e611f7bae950906bb70731e8c532a
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPEAejmZ0CliVLEEtQQhbisHRu:JRek9CkhN3ocpt34UEqXY
- TLSH T10594E1E672C4D032E0E315335AA9C6B1293ABD70672A60C7B798B76D6E713C19E75303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE