General
- Target 2026-08-14_eec971053191b8e7e66cb83e4e6fed82_amadey_elex_nionspy_smoke-loader
- Size 250KB
- Sample260814-pbx53aserf
- SHA256 caacb771eedf253d28f56012c32e609f7f924b8fa311e6fe374bc89ef4babd7e
- MD5 eec971053191b8e7e66cb83e4e6fed82
- SHA1 5daf33ad47edba812d8a4f7ec2b6359f2a8626e3
- SHA512 e7cf6f75ca3c6606e8e50a09f16fb3a9cc440772dda54697e2ee5e70c382409f7474ba08893404af23a4455c4b840ce084efcfc84e27d00a1e046ca4a161323e
- SSDEEP 6144:cd208gooGwxCo0WD2zIUQuHDv41URN/IKjyRSzDT:cdj8goyd0WfXuHDv46RNQKjP
- TLSH T1B0448E50A6D1C472C4B7257000BBAAA20D7C36352B36F5D3F7642BA49D602E1FE7936E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_eec971053191b8e7e66cb83e4e6fed82_amadey_elex_nionspy_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_eec971053191b8e7e66cb83e4e6fed82_amadey_elex_nionspy_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_eec971053191b8e7e66cb83e4e6fed82_amadey_elex_nionspy_smoke-loader
- Size 250KB
- SHA256 caacb771eedf253d28f56012c32e609f7f924b8fa311e6fe374bc89ef4babd7e
- MD5 eec971053191b8e7e66cb83e4e6fed82
- SHA1 5daf33ad47edba812d8a4f7ec2b6359f2a8626e3
- SHA512 e7cf6f75ca3c6606e8e50a09f16fb3a9cc440772dda54697e2ee5e70c382409f7474ba08893404af23a4455c4b840ce084efcfc84e27d00a1e046ca4a161323e
- SSDEEP 6144:cd208gooGwxCo0WD2zIUQuHDv41URN/IKjyRSzDT:cdj8goyd0WfXuHDv46RNQKjP
- TLSH T1B0448E50A6D1C472C4B7257000BBAAA20D7C36352B36F5D3F7642BA49D602E1FE7936E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE