General
- Target 2026-08-08_1ae4252eb301fdb3ba47737fe4a660a0_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260808-hdwaxssbkc
- SHA256 4b398dd2f4188a33df4e8a5105533df39143ca0b8e21d80563b9ff2f62d54d26
- MD5 1ae4252eb301fdb3ba47737fe4a660a0
- SHA1 d1a1edd19e12bfe3d9167c1e8a3ec1a2b06b1268
- SHA512 a87e071c32b167ca5edeb7c385913bbe7e5975d8ed1b302c9f300a8e85d50e104db6badad8c1299df94d92a1c229dc23d7a9ec411c347da04128fdbacd504e04
- SSDEEP 49152:SYp95kv148pTKrbAvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9iv2CTKr8vkcD+v49pN/3
- TLSH T1BDD522E951E15219BC42211A3AD7FAE008F5EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_1ae4252eb301fdb3ba47737fe4a660a0_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_1ae4252eb301fdb3ba47737fe4a660a0_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_1ae4252eb301fdb3ba47737fe4a660a0_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 4b398dd2f4188a33df4e8a5105533df39143ca0b8e21d80563b9ff2f62d54d26
- MD5 1ae4252eb301fdb3ba47737fe4a660a0
- SHA1 d1a1edd19e12bfe3d9167c1e8a3ec1a2b06b1268
- SHA512 a87e071c32b167ca5edeb7c385913bbe7e5975d8ed1b302c9f300a8e85d50e104db6badad8c1299df94d92a1c229dc23d7a9ec411c347da04128fdbacd504e04
- SSDEEP 49152:SYp95kv148pTKrbAvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9iv2CTKr8vkcD+v49pN/3
- TLSH T1BDD522E951E15219BC42211A3AD7FAE008F5EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1