General
- Target 2026-08-03_56074c48b031f43006170e9853a2a90f_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260803-wsllxsvela
- SHA256 d87a60a4cf8f105cdfdbdee7cff977d1ad4e2fbbf0086808e81eab29b53753b7
- MD5 56074c48b031f43006170e9853a2a90f
- SHA1 84093c77c456a247e411a9cc0f9810013beaffaf
- SHA512 40299933fd1b90343e9999d96cd95b6f4f1e0a831fcee09259da319fe08bb8db7ff8228d07aafac81cf69311244d3dd6e31f313fe73234efc449ff75d9e3ee48
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP1IF7AhBYMRP7uG8z+HBd0E3qJDlODlhNcRIsHRu:JRek9CkhN3oc/F74YM/8qHkE3qivN0RY
- TLSH T1FE94E0DA72C5D032E1E315320AA8C6B1293A7D70672E65C7BB94BB2D6EB13C15E70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_56074c48b031f43006170e9853a2a90f_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_56074c48b031f43006170e9853a2a90f_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_56074c48b031f43006170e9853a2a90f_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 d87a60a4cf8f105cdfdbdee7cff977d1ad4e2fbbf0086808e81eab29b53753b7
- MD5 56074c48b031f43006170e9853a2a90f
- SHA1 84093c77c456a247e411a9cc0f9810013beaffaf
- SHA512 40299933fd1b90343e9999d96cd95b6f4f1e0a831fcee09259da319fe08bb8db7ff8228d07aafac81cf69311244d3dd6e31f313fe73234efc449ff75d9e3ee48
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP1IF7AhBYMRP7uG8z+HBd0E3qJDlODlhNcRIsHRu:JRek9CkhN3oc/F74YM/8qHkE3qivN0RY
- TLSH T1FE94E0DA72C5D032E1E315320AA8C6B1293A7D70672E65C7BB94BB2D6EB13C15E70703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE