General
- Target 2026-08-04_641dd93ce2ea869ac8b25d438d47c607_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260804-ypr1msw1ht
- SHA256 12f10268e3410227fbfd878cba934500aacdda0903b5077e5022d73fb37c605c
- MD5 641dd93ce2ea869ac8b25d438d47c607
- SHA1 e91b200430b2d8352eb80177eb539c5ba371e88f
- SHA512 83ccca8b3a64b58808440b992ced155dee5ad2e8151fa954e7d9bc8cfb469e3351ca0a0cfd92f36641c02ab94d153c52fb535088c34edc8f7ebe7cf38eb5d305
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPStisusVU5/eyDbKa/2ABmXPFjsHRu:JRek9CkhN3ocvpRuB3mIDwXPFoY
- TLSH T1AD94E0E672D5D032E0E315335AA5C6B1293ABD306B2A60C7B7947B7C6E723C18E75603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_641dd93ce2ea869ac8b25d438d47c607_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_641dd93ce2ea869ac8b25d438d47c607_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_641dd93ce2ea869ac8b25d438d47c607_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 12f10268e3410227fbfd878cba934500aacdda0903b5077e5022d73fb37c605c
- MD5 641dd93ce2ea869ac8b25d438d47c607
- SHA1 e91b200430b2d8352eb80177eb539c5ba371e88f
- SHA512 83ccca8b3a64b58808440b992ced155dee5ad2e8151fa954e7d9bc8cfb469e3351ca0a0cfd92f36641c02ab94d153c52fb535088c34edc8f7ebe7cf38eb5d305
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPStisusVU5/eyDbKa/2ABmXPFjsHRu:JRek9CkhN3ocvpRuB3mIDwXPFoY
- TLSH T1AD94E0E672D5D032E0E315335AA5C6B1293ABD306B2A60C7B7947B7C6E723C18E75603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE