General
- Target 2026-08-06_6ee6e92076bf99c6e9e3459a3d313ae5_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- Sample260806-qmv1hsaa85
- SHA256 5dca503f747736d9d9469429f60180b82b303350e29dfcc04037885d138c531a
- MD5 6ee6e92076bf99c6e9e3459a3d313ae5
- SHA1 71706277dfb01dd15a5e8146ead688fb9e4b22a0
- SHA512 a580304a90d7d51d9e9c1e91fd234d6c2d4d97ecdeb2fab2be07d2ce3b7ad09ee34b8f1ae1a8cff6547bf99ef84d97e72f89c86ee5c48e6f6785de879850d550
- SSDEEP 49152:PYp95kv1J4n9XIvhCcD0Tgy0LXu1qoTzmYvr6/T/:wp9ive94vkcD+v49pN/7
- TLSH T106D522E891E15219BC42211A3AD6FAE008F5E7563BBE38E3DFC32594953B19BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_6ee6e92076bf99c6e9e3459a3d313ae5_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_6ee6e92076bf99c6e9e3459a3d313ae5_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_6ee6e92076bf99c6e9e3459a3d313ae5_amadey_elex_smoke-loader_stealc
- Size 2.7MB
- SHA256 5dca503f747736d9d9469429f60180b82b303350e29dfcc04037885d138c531a
- MD5 6ee6e92076bf99c6e9e3459a3d313ae5
- SHA1 71706277dfb01dd15a5e8146ead688fb9e4b22a0
- SHA512 a580304a90d7d51d9e9c1e91fd234d6c2d4d97ecdeb2fab2be07d2ce3b7ad09ee34b8f1ae1a8cff6547bf99ef84d97e72f89c86ee5c48e6f6785de879850d550
- SSDEEP 49152:PYp95kv1J4n9XIvhCcD0Tgy0LXu1qoTzmYvr6/T/:wp9ive94vkcD+v49pN/7
- TLSH T106D522E891E15219BC42211A3AD6FAE008F5E7563BBE38E3DFC32594953B19BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1