General
- Target 2026-08-17_c041f733fa19972ff391dbd8c5dc4751_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample260818-ddhmlsvcjf
- SHA256 4621f605e8812957a2a676890b8d8ae2a83bdf8495ef18c3f13a8cf28d12f43f
- MD5 c041f733fa19972ff391dbd8c5dc4751
- SHA1 0b3def5a34f2590e960e7bd0f59b4a51b13a9e6f
- SHA512 446725ebd571d9e963086d299330727473a62f58cc12fcbce77c6e869c405f037426964c4a21a2369927faa7bf48290105110d0750cb492a695bf623efe42139
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPdQmKOdE+CCdXsfRca++92hXO3sHRu:JRek9CkhN3ocKy4AVRcvRgcY
- TLSH T16994E096B2D5D032E0E315335AD9C6722A3ABD31972A20CBB754BB6D6E713C09E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c041f733fa19972ff391dbd8c5dc4751_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c041f733fa19972ff391dbd8c5dc4751_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c041f733fa19972ff391dbd8c5dc4751_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 4621f605e8812957a2a676890b8d8ae2a83bdf8495ef18c3f13a8cf28d12f43f
- MD5 c041f733fa19972ff391dbd8c5dc4751
- SHA1 0b3def5a34f2590e960e7bd0f59b4a51b13a9e6f
- SHA512 446725ebd571d9e963086d299330727473a62f58cc12fcbce77c6e869c405f037426964c4a21a2369927faa7bf48290105110d0750cb492a695bf623efe42139
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPdQmKOdE+CCdXsfRca++92hXO3sHRu:JRek9CkhN3ocKy4AVRcvRgcY
- TLSH T16994E096B2D5D032E0E315335AD9C6722A3ABD31972A20CBB754BB6D6E713C09E71703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE