General
- Target 2026-07-31_34c7eee12a12818af71edfc095e82257_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260731-xdsmcseh92
- SHA256 8629f5ce93b0f742c6bfc129b402f131dabdc82ae70e381ec630d9e856a28286
- MD5 34c7eee12a12818af71edfc095e82257
- SHA1 7947ca870716bbe2aa37c75ebe4cd6e0948f64f3
- SHA512 14278fb6b0ba0c1c2be6a7fe7c151d05924b844114a64fb49ffdd5adf6e2510bb4f3f70c7ee4345652f7fc9df32ea4504c5401e3e7d9b2a40d47cf2735f05e49
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPw78Rqxu1hjmRL3x45WdOYbrJjiGsHRu:JRek9CkhN3ocn7EqxtCk5bgY
- TLSH T12B94E1E672D1D032F0E305325A99C7A2293ABD71572A50CBB6A4BB6D6E713C19E70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_34c7eee12a12818af71edfc095e82257_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_34c7eee12a12818af71edfc095e82257_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_34c7eee12a12818af71edfc095e82257_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 8629f5ce93b0f742c6bfc129b402f131dabdc82ae70e381ec630d9e856a28286
- MD5 34c7eee12a12818af71edfc095e82257
- SHA1 7947ca870716bbe2aa37c75ebe4cd6e0948f64f3
- SHA512 14278fb6b0ba0c1c2be6a7fe7c151d05924b844114a64fb49ffdd5adf6e2510bb4f3f70c7ee4345652f7fc9df32ea4504c5401e3e7d9b2a40d47cf2735f05e49
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPw78Rqxu1hjmRL3x45WdOYbrJjiGsHRu:JRek9CkhN3ocn7EqxtCk5bgY
- TLSH T12B94E1E672D1D032F0E305325A99C7A2293ABD71572A50CBB6A4BB6D6E713C19E70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE