General
- Target 2026-08-01_edeb02f75b13780eb1c1a5e6745a8560_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260801-sxpbtsssbw
- SHA256 e543428f9946a1f1796f6b4b5fac2c0f55d94e0ef87ad739aea7c8643c0823aa
- MD5 edeb02f75b13780eb1c1a5e6745a8560
- SHA1 4faf6e03f5b6db435c62f0d4c135d22467f41c62
- SHA512 0a35bb32ac966404bf7c18db2b92ed3ddc47ab245a9d2439e038fb5f36cca6024eac6d8353b35a3726e2f15f012f77bebb3f01e7a2d4cee3bf8762ffd8f4cf1f
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPmUDEjXKEi16o5f9EFOpVkiPJh+kOjXsHRu:JRek9CkhN3ocBUoVi168QrAh+k+8Y
- TLSH T1AE94E0D672D4D032E0E315331BA9C671293ABD71672A60CBB698BB6D6EB13C19D70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_edeb02f75b13780eb1c1a5e6745a8560_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_edeb02f75b13780eb1c1a5e6745a8560_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_edeb02f75b13780eb1c1a5e6745a8560_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 e543428f9946a1f1796f6b4b5fac2c0f55d94e0ef87ad739aea7c8643c0823aa
- MD5 edeb02f75b13780eb1c1a5e6745a8560
- SHA1 4faf6e03f5b6db435c62f0d4c135d22467f41c62
- SHA512 0a35bb32ac966404bf7c18db2b92ed3ddc47ab245a9d2439e038fb5f36cca6024eac6d8353b35a3726e2f15f012f77bebb3f01e7a2d4cee3bf8762ffd8f4cf1f
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPmUDEjXKEi16o5f9EFOpVkiPJh+kOjXsHRu:JRek9CkhN3ocBUoVi168QrAh+k+8Y
- TLSH T1AE94E0D672D4D032E0E315331BA9C671293ABD71672A60CBB698BB6D6EB13C19D70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE