General
- Target 2026-08-03_64df31aab40f864e5469337a917ca331_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260804-db6awstzav
- SHA256 b5c963cd38a741f0d4638876a8f7141db95d0f6ab8ce8cbf4682c32a6ae929d8
- MD5 64df31aab40f864e5469337a917ca331
- SHA1 77f9f014ba47a7f8d6520bf13b3888dd80ecab33
- SHA512 bb3cfbdbb86ce34eabff2c8bf32a2f502f3994cf9a4b10850c637931cd496c640674f424ce9b670b58dc6334e5b7457fcec6defca9532cf133e16f7c5b176de1
- SSDEEP 49152:ck7cmFdogWOq/l/2f/vv/ok6JxBgr7uEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+3ef/n/ok6ZONQ2xjdtFSjYp
- TLSH T159E523549A58C3F2C44034F42915C7EF1E393D3D0636DECB3AEA3698AD652C38A36667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_64df31aab40f864e5469337a917ca331_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_64df31aab40f864e5469337a917ca331_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_64df31aab40f864e5469337a917ca331_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 b5c963cd38a741f0d4638876a8f7141db95d0f6ab8ce8cbf4682c32a6ae929d8
- MD5 64df31aab40f864e5469337a917ca331
- SHA1 77f9f014ba47a7f8d6520bf13b3888dd80ecab33
- SHA512 bb3cfbdbb86ce34eabff2c8bf32a2f502f3994cf9a4b10850c637931cd496c640674f424ce9b670b58dc6334e5b7457fcec6defca9532cf133e16f7c5b176de1
- SSDEEP 49152:ck7cmFdogWOq/l/2f/vv/ok6JxBgr7uEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+3ef/n/ok6ZONQ2xjdtFSjYp
- TLSH T159E523549A58C3F2C44034F42915C7EF1E393D3D0636DECB3AEA3698AD652C38A36667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE