General
- Target 2026-08-02_a08b8ec3b275ef6e0cbc5a189f6795e2_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260802-j4z78swtbt
- SHA256 ed36948e3a3a64ab83e0ee6cab122169f361c17ed86885b22a3ea4b22e2ba59b
- MD5 a08b8ec3b275ef6e0cbc5a189f6795e2
- SHA1 bfaf7f5b272807d34cfd48602bec899148648a08
- SHA512 27bbfd8c0d797626df21405c83b7c2f1d5d02f7c192b3e45e346e4db8e9b0f54c97a3784e822d5d66f0be2bb775a84da67c498a985bc5ecc0d078d30d723af77
- SSDEEP 49152:SYp95kv1BdGvKMvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivMKMvkcD+v49pN/3
- TLSH T199D522E951E15219BC42211A3AD7FAE014F1EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a08b8ec3b275ef6e0cbc5a189f6795e2_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a08b8ec3b275ef6e0cbc5a189f6795e2_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a08b8ec3b275ef6e0cbc5a189f6795e2_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 ed36948e3a3a64ab83e0ee6cab122169f361c17ed86885b22a3ea4b22e2ba59b
- MD5 a08b8ec3b275ef6e0cbc5a189f6795e2
- SHA1 bfaf7f5b272807d34cfd48602bec899148648a08
- SHA512 27bbfd8c0d797626df21405c83b7c2f1d5d02f7c192b3e45e346e4db8e9b0f54c97a3784e822d5d66f0be2bb775a84da67c498a985bc5ecc0d078d30d723af77
- SSDEEP 49152:SYp95kv1BdGvKMvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivMKMvkcD+v49pN/3
- TLSH T199D522E951E15219BC42211A3AD7FAE014F1EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1