General
- Target 2026-08-07_d27e03b7228787fc1432fbb93dd0f1f2_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260808-ay13xay1ez
- SHA256 c0f524a3d92394f8393872e0818370568cebf16e6be193f4972d0d2260f5b632
- MD5 d27e03b7228787fc1432fbb93dd0f1f2
- SHA1 d83576fbba844d9a6b78a7ab6683d34f9dd803ae
- SHA512 add9453e8719a27febe49b14734a3eab7778b94a8fb54e2634e7de9d63ea91d1191da1b36955d273bdad1d7928217a5990ce5d12c6b52a4053dae3c4787b1775
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPOiJuh1xr0WQrr51XoWQ3dNkeFPqsHR:JRek9CkhN3oc+cSB1XY3dFN
- TLSH T1C394E0E672C1E032F0E315325AE9C6B1293ABD70672A51C7B698BB6D6E713C15E74303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_d27e03b7228787fc1432fbb93dd0f1f2_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_d27e03b7228787fc1432fbb93dd0f1f2_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_d27e03b7228787fc1432fbb93dd0f1f2_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 c0f524a3d92394f8393872e0818370568cebf16e6be193f4972d0d2260f5b632
- MD5 d27e03b7228787fc1432fbb93dd0f1f2
- SHA1 d83576fbba844d9a6b78a7ab6683d34f9dd803ae
- SHA512 add9453e8719a27febe49b14734a3eab7778b94a8fb54e2634e7de9d63ea91d1191da1b36955d273bdad1d7928217a5990ce5d12c6b52a4053dae3c4787b1775
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPOiJuh1xr0WQrr51XoWQ3dNkeFPqsHR:JRek9CkhN3oc+cSB1XY3dFN
- TLSH T1C394E0E672C1E032F0E315325AE9C6B1293ABD70672A51C7B698BB6D6E713C15E74303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE