1c805f71b19aed9680a20e04443e4205506fb8032ddb650ae1414a86cdc4d38d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-04_9010c6368f1a4ceff205c0129f5991c8_amadey_elex_smoke-loader_stop.exe
Size 200KB
Sample260804-sdaz4azzav
SHA256 1c805f71b19aed9680a20e04443e4205506fb8032ddb650ae1414a86cdc4d38d
MD5 9010c6368f1a4ceff205c0129f5991c8
SHA1 90f2a523472956f056516ef4f47e70c1c15d0197
SHA512 9bfa2f3953b6bb00098c1e235f2fd4bc55eec39c4e54bd5d70b7724e4c6e4df9eee739e97749810004f1167ceab6513e0b5c4bc4304f362c75200dbae0ab858e
SSDEEP 3072:BH80ez8a0V0T4d5djIHHZAkS+0kj/mbQdbdZYWawkCPThYId+q:BHnezL0V0TwdjInqkSdkTjWwtEq
TLSH
T16E146C32FA818075D852467B4DFA577AD632F22D436280D377D82F99CB113E1A3BA349
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-04_9010c6368f1a4ceff205c0129f5991c8_amadey_elex_smoke-loader_stop.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_9010c6368f1a4ceff205c0129f5991c8_amadey_elex_smoke-loader_stop.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_9010c6368f1a4ceff205c0129f5991c8_amadey_elex_smoke-loader_stop.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads