General
- Target 2026-08-10_ccf72af01f70ba13182034acce9ab926_amadey_elex_smoke-loader_stealc
- Size 80KB
- Sample260810-nta8ksxfle
- SHA256 aee1c50b931535fb897757eb348bf6f9d06cbd76e11d3610aa9f0020abb1210c
- MD5 ccf72af01f70ba13182034acce9ab926
- SHA1 f8c34aaf33fb05a94dc8328078d1fca5db3c1398
- SHA512 c569500bc7a3729809b00ab5f9b5200efcb51ad699b17455d10d6b42d9ba40a6c1f85f08bd1119a91dbbb08740741b9afa42c6f5f7373c3a3a8228ad7afb5011
- SSDEEP 1536:Dxw8z/iN+BsDb+z6mmkkgOnuAhoB2yi2U:Dtb586zvMnsB2yi2
- TLSH T1F1834A11F250C03DF0F700BACAB54B3E9DBCAF116364A1DB97D815A99B22AD1BA31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_ccf72af01f70ba13182034acce9ab926_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_ccf72af01f70ba13182034acce9ab926_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_ccf72af01f70ba13182034acce9ab926_amadey_elex_smoke-loader_stealc
- Size 80KB
- SHA256 aee1c50b931535fb897757eb348bf6f9d06cbd76e11d3610aa9f0020abb1210c
- MD5 ccf72af01f70ba13182034acce9ab926
- SHA1 f8c34aaf33fb05a94dc8328078d1fca5db3c1398
- SHA512 c569500bc7a3729809b00ab5f9b5200efcb51ad699b17455d10d6b42d9ba40a6c1f85f08bd1119a91dbbb08740741b9afa42c6f5f7373c3a3a8228ad7afb5011
- SSDEEP 1536:Dxw8z/iN+BsDb+z6mmkkgOnuAhoB2yi2U:Dtb586zvMnsB2yi2
- TLSH T1F1834A11F250C03DF0F700BACAB54B3E9DBCAF116364A1DB97D815A99B22AD1BA31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext