General
- Target 2026-08-04_80a6830b36499e0dd8d907640b899af4_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260804-2nln1ssckd
- SHA256 b55e61189f83c403ba4bec1f3308d3acf0dd4dd2902addc9d2460e70a4cad80f
- MD5 80a6830b36499e0dd8d907640b899af4
- SHA1 ab3490a6a4b94828ee10495440e811b4400094ad
- SHA512 c7b74b844882ee57d456918a98535c151ca5af1ba08ca853519d37dd5b9d3667388f87e1e8198dbd42fb81361890950158e966c34625182a8e54faf4588017e1
- SSDEEP 49152:SYp95kv1Idv1VpvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivQ9VpvkcD+v49pN/3
- TLSH T177D522E991E15219BC42211A2AD6FAE008F5E7563BBE38E3DFC32594D53B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_80a6830b36499e0dd8d907640b899af4_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_80a6830b36499e0dd8d907640b899af4_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_80a6830b36499e0dd8d907640b899af4_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 b55e61189f83c403ba4bec1f3308d3acf0dd4dd2902addc9d2460e70a4cad80f
- MD5 80a6830b36499e0dd8d907640b899af4
- SHA1 ab3490a6a4b94828ee10495440e811b4400094ad
- SHA512 c7b74b844882ee57d456918a98535c151ca5af1ba08ca853519d37dd5b9d3667388f87e1e8198dbd42fb81361890950158e966c34625182a8e54faf4588017e1
- SSDEEP 49152:SYp95kv1Idv1VpvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivQ9VpvkcD+v49pN/3
- TLSH T177D522E991E15219BC42211A2AD6FAE008F5E7563BBE38E3DFC32594D53B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1