General
- Target 2026-08-03_502f6283d68fed07a397b63bb6d45855_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260803-wvbjqsvenb
- SHA256 f6d12111d95dfd398759be41ed85a2f97e4b1b0345c9576908918f41bd9c8b30
- MD5 502f6283d68fed07a397b63bb6d45855
- SHA1 c5414aac43ad9dcc10d92a1048e2023b9c21b466
- SHA512 e1ae027abafbf16bdbb36a639e5a2e1961de8192b32d07c9975f2ad5bff55e068fea8764210d02274ad42bf3fa91802be6b46af6586e54dc0f18cdc4ab9353f0
- SSDEEP 49152:ck7cmFdogWOq/YCwjrO7BPc5g0GFJ4asXVy1KbEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+yC0K7r4F4K4Q2xjdtFSjYp
- TLSH T138E52318C655D2F2C18038F81A02D7EF9E793E385623EDC736DA3A58AD651C39731A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_502f6283d68fed07a397b63bb6d45855_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_502f6283d68fed07a397b63bb6d45855_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_502f6283d68fed07a397b63bb6d45855_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 f6d12111d95dfd398759be41ed85a2f97e4b1b0345c9576908918f41bd9c8b30
- MD5 502f6283d68fed07a397b63bb6d45855
- SHA1 c5414aac43ad9dcc10d92a1048e2023b9c21b466
- SHA512 e1ae027abafbf16bdbb36a639e5a2e1961de8192b32d07c9975f2ad5bff55e068fea8764210d02274ad42bf3fa91802be6b46af6586e54dc0f18cdc4ab9353f0
- SSDEEP 49152:ck7cmFdogWOq/YCwjrO7BPc5g0GFJ4asXVy1KbEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+yC0K7r4F4K4Q2xjdtFSjYp
- TLSH T138E52318C655D2F2C18038F81A02D7EF9E793E385623EDC736DA3A58AD651C39731A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE