General
- Target 2026-08-07_94e7a1f6b404de34b332209dcdf6d9ce_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260807-2apthsdl5v
- SHA256 6ad9f54f21034e871df7f1624743b4427f865ace3635192387da2821c44e5d33
- MD5 94e7a1f6b404de34b332209dcdf6d9ce
- SHA1 f335124cb960893d2bb5cd7c13d4009598a42843
- SHA512 f9822400584fe25d20f43c426df89d79012c2d8c6445afc094aff040c220b5057bdd98aa1940d039d481ca91be5b40ce90406be62877a34055c026f071392dff
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP5Ma1nN2idJXpC/lpbhoOHTW2z1SIBsHRu:JRek9CkhN3oc6R32sXpcV0IGY
- TLSH T16294E19672C5D032E1E315321AE8C6B1293BBE305B2A60CBB794BB7D6E713C15E75603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_94e7a1f6b404de34b332209dcdf6d9ce_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_94e7a1f6b404de34b332209dcdf6d9ce_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_94e7a1f6b404de34b332209dcdf6d9ce_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 6ad9f54f21034e871df7f1624743b4427f865ace3635192387da2821c44e5d33
- MD5 94e7a1f6b404de34b332209dcdf6d9ce
- SHA1 f335124cb960893d2bb5cd7c13d4009598a42843
- SHA512 f9822400584fe25d20f43c426df89d79012c2d8c6445afc094aff040c220b5057bdd98aa1940d039d481ca91be5b40ce90406be62877a34055c026f071392dff
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP5Ma1nN2idJXpC/lpbhoOHTW2z1SIBsHRu:JRek9CkhN3oc6R32sXpcV0IGY
- TLSH T16294E19672C5D032E1E315321AE8C6B1293BBE305B2A60CBB794BB7D6E713C15E75603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE