General
- Target 2026-08-02_a553e9443604486445024e79b5e06387_amadey_elex_smoke-loader_stealc_tofsee
- Size 445KB
- Sample260802-vxlxtatwht
- SHA256 0ddfa70929c4771425daddcbd9394cfea7bc33c75c0e54f154c46c5f8b151af2
- MD5 a553e9443604486445024e79b5e06387
- SHA1 d215ac028897109c85a8ad76a6a3903ce79898c2
- SHA512 dc0407f267834f43a9e886c160a990e52deb8d11712324056b688f2d29cb4dacab1be214fce5f30f71764bd5790a2bdfa8fe0018e32d80ca8632b26ff592d824
- SSDEEP 6144:pUPehfcue3U9exwFa0N5FocSPHjZQBbCJaRx8Wu16VEdgyMNbt/YbHoh6+sHRu:pRek9CkhN3ocgZmbPuYCafb6bHoh6vY
- TLSH T1BDA4E1E672C5D032E0A315324EA9C672393ABE70272A60C77794B76C6EB13C19E75743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a553e9443604486445024e79b5e06387_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a553e9443604486445024e79b5e06387_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a553e9443604486445024e79b5e06387_amadey_elex_smoke-loader_stealc_tofsee
- Size 445KB
- SHA256 0ddfa70929c4771425daddcbd9394cfea7bc33c75c0e54f154c46c5f8b151af2
- MD5 a553e9443604486445024e79b5e06387
- SHA1 d215ac028897109c85a8ad76a6a3903ce79898c2
- SHA512 dc0407f267834f43a9e886c160a990e52deb8d11712324056b688f2d29cb4dacab1be214fce5f30f71764bd5790a2bdfa8fe0018e32d80ca8632b26ff592d824
- SSDEEP 6144:pUPehfcue3U9exwFa0N5FocSPHjZQBbCJaRx8Wu16VEdgyMNbt/YbHoh6+sHRu:pRek9CkhN3ocgZmbPuYCafb6bHoh6vY
- TLSH T1BDA4E1E672C5D032E0A315324EA9C672393ABE70272A60C77794B76C6EB13C19E75743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE