General
- Target 2026-08-08_65697d66eae625865eec1980c4ed38a2_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260808-hal8vavyht
- SHA256 8e16b80ea547d46c7c590bfab40a86cc70798723547f2103342bec7568ba36ea
- MD5 65697d66eae625865eec1980c4ed38a2
- SHA1 2e5230fdcf95c98bdb4c5e5a97ad22fd8e9ffc5e
- SHA512 7a22cca9aeed719406f556cc6261899d34688a47ab1af7e5a2b371331b745f1cbc9e09537a16647f01c5ea720c657db832b1ef230cac045645502ad1f61e3344
- SSDEEP 49152:SYp95kv1An1nmbvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivi1UvkcD+v49pN/3
- TLSH T179D522E891E15219BC42211A3AD7FAE048F5E7563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_65697d66eae625865eec1980c4ed38a2_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_65697d66eae625865eec1980c4ed38a2_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_65697d66eae625865eec1980c4ed38a2_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 8e16b80ea547d46c7c590bfab40a86cc70798723547f2103342bec7568ba36ea
- MD5 65697d66eae625865eec1980c4ed38a2
- SHA1 2e5230fdcf95c98bdb4c5e5a97ad22fd8e9ffc5e
- SHA512 7a22cca9aeed719406f556cc6261899d34688a47ab1af7e5a2b371331b745f1cbc9e09537a16647f01c5ea720c657db832b1ef230cac045645502ad1f61e3344
- SSDEEP 49152:SYp95kv1An1nmbvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivi1UvkcD+v49pN/3
- TLSH T179D522E891E15219BC42211A3AD7FAE048F5E7563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1