General
- Target 2026-08-01_9b78ac816bc4ed3f7384dd3a4042a717_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260801-yyscrsware
- SHA256 4ae329d8d21376b5c6e2a7813eabbc12e8cea609743daf96983e277fb9757af8
- MD5 9b78ac816bc4ed3f7384dd3a4042a717
- SHA1 2bc36b7e5eaed572576f301de810eeb112e7baeb
- SHA512 33b33b2c69d2cf227b89b73e3267e37256c78f6da79d1e307d5075f8dda7d6435017b7fc1031920c6582e2775d7f4c326c8ccd647647f845c54a1421e45111b0
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPdK1ytomF6RsgrAFCJU9uDCho/6sHRu:JRek9CkhN3octytom8suAgqLkLY
- TLSH T10594E0E672D1C032E1E315331AD9C671293ABD716B2A60C7B798BB6D6E713C18A71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_9b78ac816bc4ed3f7384dd3a4042a717_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_9b78ac816bc4ed3f7384dd3a4042a717_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_9b78ac816bc4ed3f7384dd3a4042a717_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 4ae329d8d21376b5c6e2a7813eabbc12e8cea609743daf96983e277fb9757af8
- MD5 9b78ac816bc4ed3f7384dd3a4042a717
- SHA1 2bc36b7e5eaed572576f301de810eeb112e7baeb
- SHA512 33b33b2c69d2cf227b89b73e3267e37256c78f6da79d1e307d5075f8dda7d6435017b7fc1031920c6582e2775d7f4c326c8ccd647647f845c54a1421e45111b0
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPdK1ytomF6RsgrAFCJU9uDCho/6sHRu:JRek9CkhN3octytom8suAgqLkLY
- TLSH T10594E0E672D1C032E1E315331AD9C671293ABD716B2A60C7B798BB6D6E713C18A71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE