General
- Target 2026-08-03_83a0430094b297857c3c17cc153ad7ed_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 272KB
- Sample260804-m5761saa43
- SHA256 84d7721c52877eb52b8b35741122bfe40068428aba83e7026fcb8379d23e255a
- MD5 83a0430094b297857c3c17cc153ad7ed
- SHA1 919234afcf4ef2132f8cc408107b242103bde94a
- SHA512 cd63c86b4c91f72d7cc87f75286c87b53a23102be955010a86916cf5b0608e5641130e2fb545d40f64e0623817b781d5c5807656fc11d06b605a799926dd9868
- SSDEEP 6144:Da4InuJg58BkgqPoDH49n8Bb/cg8hAodF3:Dat0EAH49n8Bt8SUF3
- TLSH T15454E66B00074760E7391770CE5975A394E839097CA7EAFFFED91A8205B91E9E06E730
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_83a0430094b297857c3c17cc153ad7ed_amadey_elex_konni_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_83a0430094b297857c3c17cc153ad7ed_amadey_elex_konni_smoke-loader_stealc_stop_tofsee
- Size 272KB
- SHA256 84d7721c52877eb52b8b35741122bfe40068428aba83e7026fcb8379d23e255a
- MD5 83a0430094b297857c3c17cc153ad7ed
- SHA1 919234afcf4ef2132f8cc408107b242103bde94a
- SHA512 cd63c86b4c91f72d7cc87f75286c87b53a23102be955010a86916cf5b0608e5641130e2fb545d40f64e0623817b781d5c5807656fc11d06b605a799926dd9868
- SSDEEP 6144:Da4InuJg58BkgqPoDH49n8Bb/cg8hAodF3:Dat0EAH49n8Bt8SUF3
- TLSH T15454E66B00074760E7391770CE5975A394E839097CA7EAFFFED91A8205B91E9E06E730
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.