General
- Target 2026-08-04_c3905f2bdd912f5c3dc455b7247367ef_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260804-wyfb4avshy
- SHA256 fd72e02a11f2b832959a968a79e8dcc688bcb2b9c8b53e211e6c4db8c06e27fc
- MD5 c3905f2bdd912f5c3dc455b7247367ef
- SHA1 6f3cce79586de97c292feb955c718c94a2fd34f9
- SHA512 f6e166afe7712d2c7c8d495484e1cb24a7204b4a0bb6e6ad69cbfb922f87849efa6d92a91c0d8c67cb8ac992c26713879e979a725ade9f9433f75a6896615cb2
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPWLYu2UC86uyvB0eW/jLBAmXAKseHAr9e20TsHRu:JRek9CkhN3oc3LYF1PuyvB0LBuKxz2ZY
- TLSH T1D494E1E672C5C032E0A315335F99C6B2293ABD70672A21C7B694BB7D6E713C19A71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_c3905f2bdd912f5c3dc455b7247367ef_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_c3905f2bdd912f5c3dc455b7247367ef_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_c3905f2bdd912f5c3dc455b7247367ef_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 fd72e02a11f2b832959a968a79e8dcc688bcb2b9c8b53e211e6c4db8c06e27fc
- MD5 c3905f2bdd912f5c3dc455b7247367ef
- SHA1 6f3cce79586de97c292feb955c718c94a2fd34f9
- SHA512 f6e166afe7712d2c7c8d495484e1cb24a7204b4a0bb6e6ad69cbfb922f87849efa6d92a91c0d8c67cb8ac992c26713879e979a725ade9f9433f75a6896615cb2
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPWLYu2UC86uyvB0eW/jLBAmXAKseHAr9e20TsHRu:JRek9CkhN3oc3LYF1PuyvB0LBuKxz2ZY
- TLSH T1D494E1E672C5C032E0A315335F99C6B2293ABD70672A21C7B694BB7D6E713C19A71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE