General
- Target 2026-08-04_2df941fbc152eca1e27ef294d9317cdc_amadey_elex_smoke-loader_stealc_stop
- Size 23.3MB
- Sample260804-tsjq8aste1
- SHA256 fef5f8c97258f8aa5656d9712dac6faba16a3b24e2991fe11e1d192820fc82a5
- MD5 2df941fbc152eca1e27ef294d9317cdc
- SHA1 37b22eadac48ab26e0ab5b09e4e59496d67f9287
- SHA512 acd778f6293a0694c4680f0caee285e63b1e979cb52daa1ec87275978cf0097d78124edba7003bf16689a49b9d52f21ab9eca00af1e1d93a9bb30aa4bf726f76
- SSDEEP 393216:GQxBukso4NpFrOySklOkidKxRlHv07WRiFWkQJWACeL1fCw7McZ0laHZVD/QpL2s:P0kstAySIOkidKxLvfRi0/uehKwYcZ0b
- TLSH T1CF3733A53A81DC35D39B107598ED9E051937BC2485427C872F884B41EA6D2EBCB7FB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2df941fbc152eca1e27ef294d9317cdc_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2df941fbc152eca1e27ef294d9317cdc_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2df941fbc152eca1e27ef294d9317cdc_amadey_elex_smoke-loader_stealc_stop
- Size 23.3MB
- SHA256 fef5f8c97258f8aa5656d9712dac6faba16a3b24e2991fe11e1d192820fc82a5
- MD5 2df941fbc152eca1e27ef294d9317cdc
- SHA1 37b22eadac48ab26e0ab5b09e4e59496d67f9287
- SHA512 acd778f6293a0694c4680f0caee285e63b1e979cb52daa1ec87275978cf0097d78124edba7003bf16689a49b9d52f21ab9eca00af1e1d93a9bb30aa4bf726f76
- SSDEEP 393216:GQxBukso4NpFrOySklOkidKxRlHv07WRiFWkQJWACeL1fCw7McZ0laHZVD/QpL2s:P0kstAySIOkidKxLvfRi0/uehKwYcZ0b
- TLSH T1CF3733A53A81DC35D39B107598ED9E051937BC2485427C872F884B41EA6D2EBCB7FB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables calling ClearMyTracksByProcess
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL