General
- Target 2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 3.4MB
- Sample260801-ae5a8aag53
- SHA256 0b1f6f1b04682454f4faa61c360b53c54a52673db803699b2c8aa54ca43ac51a
- MD5 260fc607b3effec9f1b102598189d088
- SHA1 3058fbdc0c26e5098666116e190547c4ff8df4b4
- SHA512 6fe46f77c28ed4c273096ea860466ee1743cce808772511b7174d6fccea98c343631b256ce22a2d156a33da0509bbff4254cf29b5f159f5f4d705378fa45bfb4
- SSDEEP 98304:wmR4tlRy0CrPGtTsZA8OBEP1baXXz7Q0j:xR4tlw0CisuLBE23n
- TLSH T1DAF533726AF0D0B3D66A593189E94334E47DB07C9B394899F7810F2DB7622F4C71AA43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 3.4MB
- SHA256 0b1f6f1b04682454f4faa61c360b53c54a52673db803699b2c8aa54ca43ac51a
- MD5 260fc607b3effec9f1b102598189d088
- SHA1 3058fbdc0c26e5098666116e190547c4ff8df4b4
- SHA512 6fe46f77c28ed4c273096ea860466ee1743cce808772511b7174d6fccea98c343631b256ce22a2d156a33da0509bbff4254cf29b5f159f5f4d705378fa45bfb4
- SSDEEP 98304:wmR4tlRy0CrPGtTsZA8OBEP1baXXz7Q0j:xR4tlw0CisuLBE23n
- TLSH T1DAF533726AF0D0B3D66A593189E94334E47DB07C9B394899F7810F2DB7622F4C71AA43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables calling ClearMyTracksByProcess
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application