General
- Target 2026-08-01_3b4a0069ccdd3c6db4b407479e153b1f_amadey_elex_loda_smoke-loader
- Size 2.2MB
- Sample260801-rc4qcaxflb
- SHA256 b3a88111892f19eb12f6a8972426462ca9eb0da3554939972c080fab06b3417d
- MD5 3b4a0069ccdd3c6db4b407479e153b1f
- SHA1 760c315a2aaeeda5605946dcd7979ce4c604564f
- SHA512 c56bd7507768dcc91198c96d9f3e3f89cd06bc1322d6738a49cc1db633d0dfe60ca8cd516410926b996941f885a1c2ceb560ac6392e2a2b2eaeeadb5370efb46
- SSDEEP 49152:aioDJnJOk72ACDN5j4A5DenAl3aMaVewJkvc4yZ6/53HgX13gEtr1R3:anDJnJO1AssJnAZabVCc4m6/1s13rd
- TLSH T1B3B5F152F345EDE9E80315B59C3ACA21640B7F7C4AB9550E368E762E55B338220B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_3b4a0069ccdd3c6db4b407479e153b1f_amadey_elex_loda_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_3b4a0069ccdd3c6db4b407479e153b1f_amadey_elex_loda_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3b4a0069ccdd3c6db4b407479e153b1f_amadey_elex_loda_smoke-loader
- Size 2.2MB
- SHA256 b3a88111892f19eb12f6a8972426462ca9eb0da3554939972c080fab06b3417d
- MD5 3b4a0069ccdd3c6db4b407479e153b1f
- SHA1 760c315a2aaeeda5605946dcd7979ce4c604564f
- SHA512 c56bd7507768dcc91198c96d9f3e3f89cd06bc1322d6738a49cc1db633d0dfe60ca8cd516410926b996941f885a1c2ceb560ac6392e2a2b2eaeeadb5370efb46
- SSDEEP 49152:aioDJnJOk72ACDN5j4A5DenAl3aMaVewJkvc4yZ6/53HgX13gEtr1R3:anDJnJO1AssJnAZabVCc4m6/1s13rd
- TLSH T1B3B5F152F345EDE9E80315B59C3ACA21640B7F7C4AB9550E368E762E55B338220B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE