General
- Target 2026-08-05_096c019d1ed9ad7997e42fc665a7f8c9_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260805-x2caaaep7x
- SHA256 a8a3f74cc6edf64af24c8ff7ae4eb2887acf0eb50e10931826f113bc31109384
- MD5 096c019d1ed9ad7997e42fc665a7f8c9
- SHA1 eb6e3e15d69bca3e3de8cab04aa97e0fa28b77b4
- SHA512 9f6b429e688db8eb6af2e7fd266859336100037bb95855bcb0c5b523eb84ffaa8e24970e5e845dc9ad184c8e70bb36224b270aed192b7382a997cb091e52fb04
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPeUzOEglNDXTs33pflHcrHhjoO48AzsHRu:JRek9CkhN3ocxUzOLJ0pNqoSY
- TLSH T1B494D0EA72C1D036F1D315331AA8CAB1293ABD70572A60C7B694BB6D6E713C19E75303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_096c019d1ed9ad7997e42fc665a7f8c9_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_096c019d1ed9ad7997e42fc665a7f8c9_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_096c019d1ed9ad7997e42fc665a7f8c9_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 a8a3f74cc6edf64af24c8ff7ae4eb2887acf0eb50e10931826f113bc31109384
- MD5 096c019d1ed9ad7997e42fc665a7f8c9
- SHA1 eb6e3e15d69bca3e3de8cab04aa97e0fa28b77b4
- SHA512 9f6b429e688db8eb6af2e7fd266859336100037bb95855bcb0c5b523eb84ffaa8e24970e5e845dc9ad184c8e70bb36224b270aed192b7382a997cb091e52fb04
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPeUzOEglNDXTs33pflHcrHhjoO48AzsHRu:JRek9CkhN3ocxUzOLJ0pNqoSY
- TLSH T1B494D0EA72C1D036F1D315331AA8CAB1293ABD70572A60C7B694BB6D6E713C19E75303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE