General
- Target 2026-08-01_f57597d2e13b9c1c25bd5c84e37dd890_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260801-xgvacstfjd
- SHA256 303bfb3dd5e5c9fcc02960a36c2916e72c8aed828591f3fbe467ff5469579fd3
- MD5 f57597d2e13b9c1c25bd5c84e37dd890
- SHA1 f0e0a52d2221f3898c01717fe53f3bf1cac8f205
- SHA512 9fe7c17e0f3b4f48621d629bce3d38d90fa35ebcd70a7f649a52d281f6392203e1468fc79735704ddfc8e1aa92e30b116b1bf618081263f365e9dd2ea841a2e9
- SSDEEP 12288:JRek9CkhN3oc7ycmHy44TSWR3H5Q10/CnP7Y:JRh9CkhNH7PCy4rWREP7Y
- TLSH T1F394E0E672C5D036E0E315331EA9C7B1293ABD705B2A61C7B694B76D6EB13C18A70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f57597d2e13b9c1c25bd5c84e37dd890_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f57597d2e13b9c1c25bd5c84e37dd890_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f57597d2e13b9c1c25bd5c84e37dd890_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 303bfb3dd5e5c9fcc02960a36c2916e72c8aed828591f3fbe467ff5469579fd3
- MD5 f57597d2e13b9c1c25bd5c84e37dd890
- SHA1 f0e0a52d2221f3898c01717fe53f3bf1cac8f205
- SHA512 9fe7c17e0f3b4f48621d629bce3d38d90fa35ebcd70a7f649a52d281f6392203e1468fc79735704ddfc8e1aa92e30b116b1bf618081263f365e9dd2ea841a2e9
- SSDEEP 12288:JRek9CkhN3oc7ycmHy44TSWR3H5Q10/CnP7Y:JRh9CkhNH7PCy4rWREP7Y
- TLSH T1F394E0E672C5D036E0E315331EA9C7B1293ABD705B2A61C7B694B76D6EB13C18A70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE