General
- Target 2026-08-15_d9dfa9f4ee1adcfc6c49c2829d7a54c1_amadey_elex_loda_smoke-loader
- Size 2.2MB
- Sample260815-21d5pshn4y
- SHA256 6104bc9238e118e855067d669e57bc1b0ad54e312246d2228e3198a64ed78235
- MD5 d9dfa9f4ee1adcfc6c49c2829d7a54c1
- SHA1 0f047558bbc5cec34d18714f58d3bec7aa7d06df
- SHA512 5567a397d43e0004d981ce411120272d1abcfabe314f5a4b84eb4e14b6e55943a9c874e7c2fba45c4d210422f178067f63f9d5024439bc02c3bc4aaf68d59cf9
- SSDEEP 49152:aioDJnJOk72ACTsZ3OQjkCYEZ4J/tjeY5g1rnLEud64P9R3:anDJnJO1AbJaCYEYyYurnLEWP9d
- TLSH T17DB5F152F3459CE9E80315F59C7ACA12644B7E7D4AB9460E368E772E45B338220B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_d9dfa9f4ee1adcfc6c49c2829d7a54c1_amadey_elex_loda_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_d9dfa9f4ee1adcfc6c49c2829d7a54c1_amadey_elex_loda_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_d9dfa9f4ee1adcfc6c49c2829d7a54c1_amadey_elex_loda_smoke-loader
- Size 2.2MB
- SHA256 6104bc9238e118e855067d669e57bc1b0ad54e312246d2228e3198a64ed78235
- MD5 d9dfa9f4ee1adcfc6c49c2829d7a54c1
- SHA1 0f047558bbc5cec34d18714f58d3bec7aa7d06df
- SHA512 5567a397d43e0004d981ce411120272d1abcfabe314f5a4b84eb4e14b6e55943a9c874e7c2fba45c4d210422f178067f63f9d5024439bc02c3bc4aaf68d59cf9
- SSDEEP 49152:aioDJnJOk72ACTsZ3OQjkCYEZ4J/tjeY5g1rnLEud64P9R3:anDJnJO1AbJaCYEYyYurnLEWP9d
- TLSH T17DB5F152F3459CE9E80315F59C7ACA12644B7E7D4AB9460E368E772E45B338220B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE