Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
06/08/2026, 18:09
General
- Target 2026-08-06_3d40183e1b64c5c527d785d030bdba6b_amadey_elex_smoke-loader.exe
- Size 2.0MB
- Sample260806-wry6maxdlb
- SHA256 ad60ef4e7b6b8f5e5068b153bdbb3377db93bc48189fb149dbbed4f89c44e72e
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
- Executes dropped EXE 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_3d40183e1b64c5c527d785d030bdba6b_amadey_elex_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_3d40183e1b64c5c527d785d030bdba6b_amadey_elex_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5A4B.tmp"C:\Users\Admin\AppData\Local\Temp\5A4B.tmp" --splashC:\Users\Admin\AppData\Local\Temp\2026-08-06_3d40183e1b64c5c527d785d030bdba6b_amadey_elex_smoke-loader.exe 8746C4466F989DD1E8855EA05A3BB1D35E95A01ED90F59CAA3DDE5288FF5C9ABB86FFBB92248A8A6BBB37624BFE5E8E3B48D8547984C29925DC0BE89F821949F2⤵
- Deletes itself
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
5A4B.tmp
memory/1360-7-0x0000000000400000-0x0000000000600000-memory.dmp
memory/1360-9-0x0000000000400000-0x0000000000600000-memory.dmp
memory/1360-10-0x0000000000400000-0x0000000000600000-memory.dmp
memory/2560-0-0x0000000000400000-0x0000000000600000-memory.dmp
memory/2560-1-0x0000000000400000-0x0000000000600000-memory.dmp
memory/2560-6-0x0000000000400000-0x0000000000600000-memory.dmp