General
- Target 2026-08-02_8358f43807a07bf7ac7cf3c8244eb360_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- Sample260802-rfn43avaqb
- SHA256 6e66245b42940fd4714ffe7e3a2ff525fc6619158a1bab3dc57a439af763437c
- MD5 8358f43807a07bf7ac7cf3c8244eb360
- SHA1 d8ed0240a3515b5b3cbd1f6f0dfebeae81770a5a
- SHA512 9b742f9f00b307fdffaadf98a9b0b2ed95202772bfb3b3c6bb315b97c23fda38971813d0e1b28cdd6173b7b741ad85c4f8035056459f28bca3280d0d044cdf4a
- SSDEEP 98304:mymQDst8YExVXkjumLThgc03X/p/W0ktEVUMUtJh:V08zxVUK8T+cC/p/W0KrJh
- TLSH T129E533633DD2C136F96728304A5593E0FA38F8706331D94AABD9096EEE32792C354797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8358f43807a07bf7ac7cf3c8244eb360_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8358f43807a07bf7ac7cf3c8244eb360_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8358f43807a07bf7ac7cf3c8244eb360_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 3.0MB
- SHA256 6e66245b42940fd4714ffe7e3a2ff525fc6619158a1bab3dc57a439af763437c
- MD5 8358f43807a07bf7ac7cf3c8244eb360
- SHA1 d8ed0240a3515b5b3cbd1f6f0dfebeae81770a5a
- SHA512 9b742f9f00b307fdffaadf98a9b0b2ed95202772bfb3b3c6bb315b97c23fda38971813d0e1b28cdd6173b7b741ad85c4f8035056459f28bca3280d0d044cdf4a
- SSDEEP 98304:mymQDst8YExVXkjumLThgc03X/p/W0ktEVUMUtJh:V08zxVUK8T+cC/p/W0KrJh
- TLSH T129E533633DD2C136F96728304A5593E0FA38F8706331D94AABD9096EEE32792C354797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE