General
- Target 2026-08-01_f3c5ec212ce4f43bbc0cc2e5a6e09853_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260801-pl731sverb
- SHA256 d5e5564ebad87a2e361dd9eced7bcc6cd2db6ce268614b255566a25e6ea00e7f
- MD5 f3c5ec212ce4f43bbc0cc2e5a6e09853
- SHA1 66db4576143dbc83fe99e32e62ac211fc35dbb1e
- SHA512 ef46f720e9e97cb8a9f9e57efe47dc4a90ec44eb975cf3e97cc524ac9f5fd3d208f5287e2277a1ff8b65cee3520a370def6e5ae104a19372c325f95740ad8f28
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPt6+epRYOjQIEalOjfZWn7utPksHRu:JRek9CkhN3ocu6NvbblOjhWnqLY
- TLSH T1AE94E0D672D5D032F0E315321AA9C762293ABD30672A61C7B794BB6D6EB23C14E70707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f3c5ec212ce4f43bbc0cc2e5a6e09853_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f3c5ec212ce4f43bbc0cc2e5a6e09853_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f3c5ec212ce4f43bbc0cc2e5a6e09853_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 d5e5564ebad87a2e361dd9eced7bcc6cd2db6ce268614b255566a25e6ea00e7f
- MD5 f3c5ec212ce4f43bbc0cc2e5a6e09853
- SHA1 66db4576143dbc83fe99e32e62ac211fc35dbb1e
- SHA512 ef46f720e9e97cb8a9f9e57efe47dc4a90ec44eb975cf3e97cc524ac9f5fd3d208f5287e2277a1ff8b65cee3520a370def6e5ae104a19372c325f95740ad8f28
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPt6+epRYOjQIEalOjfZWn7utPksHRu:JRek9CkhN3ocu6NvbblOjhWnqLY
- TLSH T1AE94E0D672D5D032F0E315321AA9C762293ABD30672A61C7B794BB6D6EB23C14E70707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE