General
- Target 2026-08-08_5fdf0e577695602f6913edab1b9a913e_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260808-d24vrayhnf
- SHA256 3b7f9ac52b067cbcffe0edac786cceff9161dd1823e822de6a59f9574b304fec
- MD5 5fdf0e577695602f6913edab1b9a913e
- SHA1 7675d8b96e37b9513f9a762bfae02d30c67899f7
- SHA512 be2787aa63199a143e11968550f425de3f1a4b5afa3d21a690622eae31bcb249464404d543ebe41e0eca6f755ff55d8f8914ffd732950f9c9899bfb40bcb8af4
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPR7bBjzU7OJSeVqaWYTJG0MbDsHRu:JRek9CkhN3ocK79jzUCJDqyTkLUY
- TLSH T16994E1E672D1D031F0E315331AA8D6A1293ABD70672A60C7B798BB2D6E713C19E74703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_5fdf0e577695602f6913edab1b9a913e_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_5fdf0e577695602f6913edab1b9a913e_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_5fdf0e577695602f6913edab1b9a913e_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 3b7f9ac52b067cbcffe0edac786cceff9161dd1823e822de6a59f9574b304fec
- MD5 5fdf0e577695602f6913edab1b9a913e
- SHA1 7675d8b96e37b9513f9a762bfae02d30c67899f7
- SHA512 be2787aa63199a143e11968550f425de3f1a4b5afa3d21a690622eae31bcb249464404d543ebe41e0eca6f755ff55d8f8914ffd732950f9c9899bfb40bcb8af4
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPR7bBjzU7OJSeVqaWYTJG0MbDsHRu:JRek9CkhN3ocK79jzUCJDqyTkLUY
- TLSH T16994E1E672D1D031F0E315331AA8D6A1293ABD70672A60C7B798BB2D6E713C19E74703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE