General
- Target 2026-08-05_91c26e79d7905aea39cb2d2069f76ca9_amadey_elex_smoke-loader
- Size 3.1MB
- Sample260805-hnsmsaxtg1
- SHA256 7e4cd032e07fd68e419b26f7b2f7cd3d75d0ada183fd40262a9dd3e1a85073e2
- MD5 91c26e79d7905aea39cb2d2069f76ca9
- SHA1 cb8ffb594bbcda7142c65f9fceda28677de9b2b4
- SHA512 7db770c9be7f1bad98db7d8e2653ce8f95e4a5fd24d8c7d282694a3aae943efd97e8ae72dd9c4a31c1b6b0f11b6f781ba358aca319136082eb2c22287310f5ae
- SSDEEP 98304:8k7cmdXCPqgBVsNvh8DFVqcQ2xjdtFSjYpx:v7crqD8XRljdtGYP
- TLSH T1D6E52301A745C1B2D0C079B56552C3DBD6343FBC8B369C8B3FCD3A2A6D68AC29631A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_91c26e79d7905aea39cb2d2069f76ca9_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_91c26e79d7905aea39cb2d2069f76ca9_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_91c26e79d7905aea39cb2d2069f76ca9_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 7e4cd032e07fd68e419b26f7b2f7cd3d75d0ada183fd40262a9dd3e1a85073e2
- MD5 91c26e79d7905aea39cb2d2069f76ca9
- SHA1 cb8ffb594bbcda7142c65f9fceda28677de9b2b4
- SHA512 7db770c9be7f1bad98db7d8e2653ce8f95e4a5fd24d8c7d282694a3aae943efd97e8ae72dd9c4a31c1b6b0f11b6f781ba358aca319136082eb2c22287310f5ae
- SSDEEP 98304:8k7cmdXCPqgBVsNvh8DFVqcQ2xjdtFSjYpx:v7crqD8XRljdtGYP
- TLSH T1D6E52301A745C1B2D0C079B56552C3DBD6343FBC8B369C8B3FCD3A2A6D68AC29631A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE