General
- Target 2026-08-01_324f0f62b1eaab08f75c9df28eb275db_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260801-vseb6ssard
- SHA256 32961d81531c09671bc619cb53fecac1be5b977f38e0df5961dcb824e070d8b6
- MD5 324f0f62b1eaab08f75c9df28eb275db
- SHA1 b5aee449923de685280d2821768b3698d24f6553
- SHA512 bf9bfe8ea765d65bb7433a6fe63d997ca2b795e4b56ca4acc2bdf2b5dfc24b7ed476b5b4a6c1c72200f8c4c399b7a5dcebabf790ca8ca7f566d98e06bb97a587
- SSDEEP 98304:8k7cmdXCPqgB8UczwLWBAq/W92Q2xjdtFSjYpx:v7crqjzeODU2ljdtGYP
- TLSH T1C7E52301B385C1A2D0D079F56512C3DBEA793F785667DC8B3FCD2B2EA868AC24534A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_324f0f62b1eaab08f75c9df28eb275db_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_324f0f62b1eaab08f75c9df28eb275db_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_324f0f62b1eaab08f75c9df28eb275db_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 32961d81531c09671bc619cb53fecac1be5b977f38e0df5961dcb824e070d8b6
- MD5 324f0f62b1eaab08f75c9df28eb275db
- SHA1 b5aee449923de685280d2821768b3698d24f6553
- SHA512 bf9bfe8ea765d65bb7433a6fe63d997ca2b795e4b56ca4acc2bdf2b5dfc24b7ed476b5b4a6c1c72200f8c4c399b7a5dcebabf790ca8ca7f566d98e06bb97a587
- SSDEEP 98304:8k7cmdXCPqgB8UczwLWBAq/W92Q2xjdtFSjYpx:v7crqjzeODU2ljdtGYP
- TLSH T1C7E52301B385C1A2D0D079F56512C3DBEA793F785667DC8B3FCD2B2EA868AC24534A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE