General
- Target 2026-08-03_d7106a05aa8d921e17b265bb5ffe6d06_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260803-t98fxatcjc
- SHA256 a5683d998c59514074a922bdf96cf9501afa304e25acd95b897af4aec5eed030
- MD5 d7106a05aa8d921e17b265bb5ffe6d06
- SHA1 e36234c3044e86dbaca10eec31ee3ddd4ac108a7
- SHA512 689b822f05d10880310a769b6340925eef2be512a612e3008b052e7102e7971136161d57e2aa4d17a4b22d59f277ad7b37dcc070d343df0ae33f9b9220d18fd5
- SSDEEP 49152:ck7cmFdogWOq/sZpq+vYxDyZXp0FimF3m4xo+52EQf/mh96qjdtEkr9Sj6D6e:ck7cmd+aZRYZU0PFBxoWQ2xjdtFSjYp
- TLSH T1F1E52254C659C3F3D18038F16A1AD3EF5A393D3C0662DDC73ADA26A8ED201C39636667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_d7106a05aa8d921e17b265bb5ffe6d06_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_d7106a05aa8d921e17b265bb5ffe6d06_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_d7106a05aa8d921e17b265bb5ffe6d06_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 a5683d998c59514074a922bdf96cf9501afa304e25acd95b897af4aec5eed030
- MD5 d7106a05aa8d921e17b265bb5ffe6d06
- SHA1 e36234c3044e86dbaca10eec31ee3ddd4ac108a7
- SHA512 689b822f05d10880310a769b6340925eef2be512a612e3008b052e7102e7971136161d57e2aa4d17a4b22d59f277ad7b37dcc070d343df0ae33f9b9220d18fd5
- SSDEEP 49152:ck7cmFdogWOq/sZpq+vYxDyZXp0FimF3m4xo+52EQf/mh96qjdtEkr9Sj6D6e:ck7cmd+aZRYZU0PFBxoWQ2xjdtFSjYp
- TLSH T1F1E52254C659C3F3D18038F16A1AD3EF5A393D3C0662DDC73ADA26A8ED201C39636667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE