General
- Target 2026-07-31_f8a1eba27a1c4c55ce327a88b1f00a76_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260731-y5s8msgj6v
- SHA256 b72aba3ceb5b9ce326f57681580f741da223cab8cbda316f61ea3ffbec76c812
- MD5 f8a1eba27a1c4c55ce327a88b1f00a76
- SHA1 3135a62ba44b0220fcfa916a50000f792678623f
- SHA512 436f36767f175735a5bdff07191fc04fca3564f162dd4d2c06af79199efc30e0a008f1926ced55ab2bef05a9ddd606f1af1697b9597af1b1b574c9a89248346a
- SSDEEP 12288:JRek9CkhN3ocBNwpIh39vJgSMS74sXEqyY:JRh9CkhNHBXtvq69EY
- TLSH T1B994E1D672D1C032E19315335EE9C6B2293ABD70672A60C7B694BB7D6EB13C19A71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_f8a1eba27a1c4c55ce327a88b1f00a76_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_f8a1eba27a1c4c55ce327a88b1f00a76_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_f8a1eba27a1c4c55ce327a88b1f00a76_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 b72aba3ceb5b9ce326f57681580f741da223cab8cbda316f61ea3ffbec76c812
- MD5 f8a1eba27a1c4c55ce327a88b1f00a76
- SHA1 3135a62ba44b0220fcfa916a50000f792678623f
- SHA512 436f36767f175735a5bdff07191fc04fca3564f162dd4d2c06af79199efc30e0a008f1926ced55ab2bef05a9ddd606f1af1697b9597af1b1b574c9a89248346a
- SSDEEP 12288:JRek9CkhN3ocBNwpIh39vJgSMS74sXEqyY:JRh9CkhNHBXtvq69EY
- TLSH T1B994E1D672D1C032E19315335EE9C6B2293ABD70672A60C7B694BB7D6EB13C19A71303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE