General
- Target 2026-08-07_e6bd8c67e3e26e84d38fdb39e7fb15ac_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260807-vldgasha33
- SHA256 c464eedbb6a06441bfbbd387c4308cfe72e5a53d1d65b81e1e907ffee71e9e9c
- MD5 e6bd8c67e3e26e84d38fdb39e7fb15ac
- SHA1 0768632c067b0e13935cb9e2e2d51f58f2d2dafc
- SHA512 bce33c57c9cae627e6923717a95a7dc00edb57fbeba66aa18afe5fc731f1a8bd7ceee6fdda2ce29bf58b1c6bcd7f067bd8b2825c6d61f17ce6833c0faacfff1e
- SSDEEP 49152:SYp95kv1fso/QoKKvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9iv5x/Q9KvkcD+v49pN/3
- TLSH T1E5D522EC91E15219BC42215A3AD6FAE108F1E7563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_e6bd8c67e3e26e84d38fdb39e7fb15ac_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_e6bd8c67e3e26e84d38fdb39e7fb15ac_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_e6bd8c67e3e26e84d38fdb39e7fb15ac_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 c464eedbb6a06441bfbbd387c4308cfe72e5a53d1d65b81e1e907ffee71e9e9c
- MD5 e6bd8c67e3e26e84d38fdb39e7fb15ac
- SHA1 0768632c067b0e13935cb9e2e2d51f58f2d2dafc
- SHA512 bce33c57c9cae627e6923717a95a7dc00edb57fbeba66aa18afe5fc731f1a8bd7ceee6fdda2ce29bf58b1c6bcd7f067bd8b2825c6d61f17ce6833c0faacfff1e
- SSDEEP 49152:SYp95kv1fso/QoKKvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9iv5x/Q9KvkcD+v49pN/3
- TLSH T1E5D522EC91E15219BC42215A3AD6FAE108F1E7563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1