General
- Target 2026-08-08_2bf2352fd49bdc894c7e6aaf05eb07a3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260808-ef5etssydt
- SHA256 e06d22c7d33c803a396a9f5f1fb7f5630c44463dc15ebc25fa9b28a57dc5f049
- MD5 2bf2352fd49bdc894c7e6aaf05eb07a3
- SHA1 5506cac218d9d906f636337ac7a1c6533283a418
- SHA512 0c4e33e39920c87a87dcf45a8b8c3d25373d2b297f04e485b56ff748d6009b574a1a8500d71d9f373d19dc3ef79350acbc9daeea11648ef17155e0de7244bfe8
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPuOEo+KZFriGdPM7GKxA70x3+asHRu:JRek9CkhN3oc6lhFuG5M71xA7s3AY
- TLSH T17694E0E672C1D072F0A315325A98C6B1293ABD70672B20C7B798BB7D6E713C19E74607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2bf2352fd49bdc894c7e6aaf05eb07a3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_2bf2352fd49bdc894c7e6aaf05eb07a3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2bf2352fd49bdc894c7e6aaf05eb07a3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 e06d22c7d33c803a396a9f5f1fb7f5630c44463dc15ebc25fa9b28a57dc5f049
- MD5 2bf2352fd49bdc894c7e6aaf05eb07a3
- SHA1 5506cac218d9d906f636337ac7a1c6533283a418
- SHA512 0c4e33e39920c87a87dcf45a8b8c3d25373d2b297f04e485b56ff748d6009b574a1a8500d71d9f373d19dc3ef79350acbc9daeea11648ef17155e0de7244bfe8
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPuOEo+KZFriGdPM7GKxA70x3+asHRu:JRek9CkhN3oc6lhFuG5M71xA7s3AY
- TLSH T17694E0E672C1D072F0A315325A98C6B1293ABD70672B20C7B798BB7D6E713C19E74607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE