General
- Target 2026-08-14_85f83c9b4741fcc6b112406b535762cd_amadey_elex_nionspy_smoke-loader
- Size 250KB
- Sample260815-ctfmhsdd44
- SHA256 6b3a80692a878395415ad6873559a3023903683ed3a294e274019ca63d515292
- MD5 85f83c9b4741fcc6b112406b535762cd
- SHA1 55d335bd2689c6e26a9ef1dd0142cbca29e43c04
- SHA512 22e8b8c2e69983d9cecda546126b85728ad5352983c70a01d179a144d910ac970778ee571b42b3fe7958f048611538dddedf252d818c6406f3f3823488c6213d
- SSDEEP 6144:od208gooGwxCo0WD2zIUQuHDv41URN/IKjyRSzDT:odj8goyd0WfXuHDv46RNQKjP
- TLSH T1D9448E50A6D1C472C4B7257000BBAAA20D7C36352B36F5D3F7642BA49D602E1FE7936E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_85f83c9b4741fcc6b112406b535762cd_amadey_elex_nionspy_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_85f83c9b4741fcc6b112406b535762cd_amadey_elex_nionspy_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_85f83c9b4741fcc6b112406b535762cd_amadey_elex_nionspy_smoke-loader
- Size 250KB
- SHA256 6b3a80692a878395415ad6873559a3023903683ed3a294e274019ca63d515292
- MD5 85f83c9b4741fcc6b112406b535762cd
- SHA1 55d335bd2689c6e26a9ef1dd0142cbca29e43c04
- SHA512 22e8b8c2e69983d9cecda546126b85728ad5352983c70a01d179a144d910ac970778ee571b42b3fe7958f048611538dddedf252d818c6406f3f3823488c6213d
- SSDEEP 6144:od208gooGwxCo0WD2zIUQuHDv41URN/IKjyRSzDT:odj8goyd0WfXuHDv46RNQKjP
- TLSH T1D9448E50A6D1C472C4B7257000BBAAA20D7C36352B36F5D3F7642BA49D602E1FE7936E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE