General
- Target 2026-08-03_5d31216b80c01f8306fa8ff969f65dff_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260804-ddd97a1ard
- SHA256 d660efc6d795fab16a2fb9017b8116d614807dfeed5e275311a2c24a0c2b6737
- MD5 5d31216b80c01f8306fa8ff969f65dff
- SHA1 01b7f1becf7e652ed42a6f50b9e30d1a30601e80
- SHA512 71bdc39675212ec1a56a280c932830f3bb51de4ff1b928fa412c7e0b9c71d0fee7042df37cdbb292aa8ea7528c3712d008cd37dcbefb02e76b283257577ce399
- SSDEEP 12288:JRek9CkhN3oc2Z6gi16T6INgceIRbM9d+r7ij:JRh9CkhNHu6giIycxqD+Xij
- TLSH T10094E0E272C5C032F0E315321AA8C671297ABD70672A61C7B794BB6D6E717C19EB1703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5d31216b80c01f8306fa8ff969f65dff_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5d31216b80c01f8306fa8ff969f65dff_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5d31216b80c01f8306fa8ff969f65dff_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 d660efc6d795fab16a2fb9017b8116d614807dfeed5e275311a2c24a0c2b6737
- MD5 5d31216b80c01f8306fa8ff969f65dff
- SHA1 01b7f1becf7e652ed42a6f50b9e30d1a30601e80
- SHA512 71bdc39675212ec1a56a280c932830f3bb51de4ff1b928fa412c7e0b9c71d0fee7042df37cdbb292aa8ea7528c3712d008cd37dcbefb02e76b283257577ce399
- SSDEEP 12288:JRek9CkhN3oc2Z6gi16T6INgceIRbM9d+r7ij:JRh9CkhNHu6giIycxqD+Xij
- TLSH T10094E0E272C5C032F0E315321AA8C671297ABD70672A61C7B794BB6D6E717C19EB1703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE