General
- Target 2026-08-04_f719244eea9d4224b0589b80c8bf58e0_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260804-qqccksxyhs
- SHA256 011682f111c70a71058844f52e02fbb462290ce669d6b5fcec25fb17e74f0044
- MD5 f719244eea9d4224b0589b80c8bf58e0
- SHA1 c38e2b3808c2b8125ff71aed845d04097f5af1bf
- SHA512 80d3b354f3265ecaa9b92ba707ff531d09dea944bf91d4e1b08f2485757ce7e22440a47023adf4ed4da18a4b4c4b389bf384263b5e9caa180f4e82ee6035da23
- SSDEEP 49152:SYp95kv1HXrKvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivRbKvkcD+v49pN/3
- TLSH T119D522ED51E15219BC42211A3AD6FAE008F5E7563BBE38E3DFC32594953B0AADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f719244eea9d4224b0589b80c8bf58e0_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f719244eea9d4224b0589b80c8bf58e0_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f719244eea9d4224b0589b80c8bf58e0_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 011682f111c70a71058844f52e02fbb462290ce669d6b5fcec25fb17e74f0044
- MD5 f719244eea9d4224b0589b80c8bf58e0
- SHA1 c38e2b3808c2b8125ff71aed845d04097f5af1bf
- SHA512 80d3b354f3265ecaa9b92ba707ff531d09dea944bf91d4e1b08f2485757ce7e22440a47023adf4ed4da18a4b4c4b389bf384263b5e9caa180f4e82ee6035da23
- SSDEEP 49152:SYp95kv1HXrKvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivRbKvkcD+v49pN/3
- TLSH T119D522ED51E15219BC42211A3AD6FAE008F5E7563BBE38E3DFC32594953B0AADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1