General
- Target 2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 3.4MB
- Sample260801-ae5a8aag53
- SHA256 0b1f6f1b04682454f4faa61c360b53c54a52673db803699b2c8aa54ca43ac51a
- MD5 260fc607b3effec9f1b102598189d088
- SHA1 3058fbdc0c26e5098666116e190547c4ff8df4b4
- SHA512 6fe46f77c28ed4c273096ea860466ee1743cce808772511b7174d6fccea98c343631b256ce22a2d156a33da0509bbff4254cf29b5f159f5f4d705378fa45bfb4
- SSDEEP 98304:wmR4tlRy0CrPGtTsZA8OBEP1baXXz7Q0j:xR4tlw0CisuLBE23n
- TLSH T1DAF533726AF0D0B3D66A593189E94334E47DB07C9B394899F7810F2DB7622F4C71AA43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_260fc607b3effec9f1b102598189d088_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 3.4MB
- SHA256 0b1f6f1b04682454f4faa61c360b53c54a52673db803699b2c8aa54ca43ac51a
- MD5 260fc607b3effec9f1b102598189d088
- SHA1 3058fbdc0c26e5098666116e190547c4ff8df4b4
- SHA512 6fe46f77c28ed4c273096ea860466ee1743cce808772511b7174d6fccea98c343631b256ce22a2d156a33da0509bbff4254cf29b5f159f5f4d705378fa45bfb4
- SSDEEP 98304:wmR4tlRy0CrPGtTsZA8OBEP1baXXz7Q0j:xR4tlw0CisuLBE23n
- TLSH T1DAF533726AF0D0B3D66A593189E94334E47DB07C9B394899F7810F2DB7622F4C71AA43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables calling ClearMyTracksByProcess
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application