General
- Target 2026-08-18_3ceb417ac3e72a1ba707876985abbbd7_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260818-ct576svwds
- SHA256 02bb1aa75da39662210c68718bcacd0bcab9c289fdb9992007dc49223cd0a92c
- MD5 3ceb417ac3e72a1ba707876985abbbd7
- SHA1 8752ac79579c9572141409842fee9275dc3d8864
- SHA512 7b8416d79f3cc755430edd35142e2cc308987e23df64624ac874d3c698c537a43d36ae70c55a657480e48df49669340471db9ffd188065c3f6938ed5c188ad7b
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPrZzN0qKS7c2B8ale+QJry9px39ZsHRu:JRek9CkhN3ocqRd1k+QJry9rQY
- TLSH T1C094E1E672C1C036E0E315325BA8C7A1293ABD706B2A61C7B794BB6C6E717C18D75703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_3ceb417ac3e72a1ba707876985abbbd7_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_3ceb417ac3e72a1ba707876985abbbd7_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_3ceb417ac3e72a1ba707876985abbbd7_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 02bb1aa75da39662210c68718bcacd0bcab9c289fdb9992007dc49223cd0a92c
- MD5 3ceb417ac3e72a1ba707876985abbbd7
- SHA1 8752ac79579c9572141409842fee9275dc3d8864
- SHA512 7b8416d79f3cc755430edd35142e2cc308987e23df64624ac874d3c698c537a43d36ae70c55a657480e48df49669340471db9ffd188065c3f6938ed5c188ad7b
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPrZzN0qKS7c2B8ale+QJry9px39ZsHRu:JRek9CkhN3ocqRd1k+QJry9rQY
- TLSH T1C094E1E672C1C036E0E315325BA8C7A1293ABD706B2A61C7B794BB6C6E717C18D75703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE