General
- Target 2026-08-02_c16fc66359b6c3531350abf06ec76d5d_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260802-jw4wfsfd73
- SHA256 0962b8584acb70cb6ce1d3a196df78e2bb4c2ea7b90990a63b6429b05594c475
- MD5 c16fc66359b6c3531350abf06ec76d5d
- SHA1 a6d51e7dfbd51427a437d2e2ee5faed39f801958
- SHA512 5254d9ae233dcf1d735d63533771ae154407c7dd921205a6d6642db249ba1ed31a2911c42e5c4cbd3ef1a2cce419e344f0645b650079f7bf2d5607ec916d0aaf
- SSDEEP 49152:ck7cmFdogWOq/YGmXVAiZKwIaxiX4lzQNGGraAiRWEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+OzFAisaOdXGBQ2xjdtFSjYp
- TLSH T1F2E523649659D2F2C18074F46A02D7EB9E383D394733DDCB3BCA3AA8AC111C74636A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c16fc66359b6c3531350abf06ec76d5d_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_c16fc66359b6c3531350abf06ec76d5d_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c16fc66359b6c3531350abf06ec76d5d_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 0962b8584acb70cb6ce1d3a196df78e2bb4c2ea7b90990a63b6429b05594c475
- MD5 c16fc66359b6c3531350abf06ec76d5d
- SHA1 a6d51e7dfbd51427a437d2e2ee5faed39f801958
- SHA512 5254d9ae233dcf1d735d63533771ae154407c7dd921205a6d6642db249ba1ed31a2911c42e5c4cbd3ef1a2cce419e344f0645b650079f7bf2d5607ec916d0aaf
- SSDEEP 49152:ck7cmFdogWOq/YGmXVAiZKwIaxiX4lzQNGGraAiRWEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+OzFAisaOdXGBQ2xjdtFSjYp
- TLSH T1F2E523649659D2F2C18074F46A02D7EB9E383D394733DDCB3BCA3AA8AC111C74636A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE