General
- Target 2026-08-03_c0ca580aca5ce689b0bedcdf5f1af6a7_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260803-fd4wysssbs
- SHA256 fbd4598957c169d1f2c0d04384a033515954b6b31fba0e6af221f03375700e75
- MD5 c0ca580aca5ce689b0bedcdf5f1af6a7
- SHA1 d1f066600bbf8b3b6186bb7265594768ffd649ef
- SHA512 ebe4df60619792ea6143ae079b543bdeee161db9c2300d1f8434a9fbf197d26c6abc08bb4d0b484470a43c2f52ae3c6e3cc9a9a45f5635ab72cee8c14b95d420
- SSDEEP 49152:SYp95kv10oFvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivrFvkcD+v49pN/3
- TLSH T161D522E991E15219BC42211A3AD6FAE008F1E7563BBE38E3DFC32594953B09BDE1D305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c0ca580aca5ce689b0bedcdf5f1af6a7_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c0ca580aca5ce689b0bedcdf5f1af6a7_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c0ca580aca5ce689b0bedcdf5f1af6a7_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 fbd4598957c169d1f2c0d04384a033515954b6b31fba0e6af221f03375700e75
- MD5 c0ca580aca5ce689b0bedcdf5f1af6a7
- SHA1 d1f066600bbf8b3b6186bb7265594768ffd649ef
- SHA512 ebe4df60619792ea6143ae079b543bdeee161db9c2300d1f8434a9fbf197d26c6abc08bb4d0b484470a43c2f52ae3c6e3cc9a9a45f5635ab72cee8c14b95d420
- SSDEEP 49152:SYp95kv10oFvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivrFvkcD+v49pN/3
- TLSH T161D522E991E15219BC42211A3AD6FAE008F1E7563BBE38E3DFC32594953B09BDE1D305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1