General
- Target 2026-08-19_e27a1d2f1596f03b673d462d077383db_amadey_elex_smoke-loader
- Size 3.0MB
- Sample260819-bsbrhawtcs
- SHA256 331f070ff7b28120407803f061340091f636f4a9f29a84b6d6a45de81755bd3d
- MD5 e27a1d2f1596f03b673d462d077383db
- SHA1 c2674391c0ba6e591b8d801c0a0d52173495418c
- SHA512 d11d1ab137edcac01624eb39aa04063b507518e4e50ca44905be1f9ac8f5adb302cc22089777cccb5c295f40fb79cff02ad5d4cc03703511af21ca18a7412334
- SSDEEP 24576:UCJeo5NXUCvxwJfuvKYoKPDorlej6N82bJM1+XsxtYkgb9SddLlzVhWWXc2UhpLB:/WuAw8sdg5C55VhWosp9l
- TLSH T18BE53840E600812ADCFB11F54AAE713C615CBDE44764A1CBA1D87AFA9B763F03D3964B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_e27a1d2f1596f03b673d462d077383db_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_e27a1d2f1596f03b673d462d077383db_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_e27a1d2f1596f03b673d462d077383db_amadey_elex_smoke-loader
- Size 3.0MB
- SHA256 331f070ff7b28120407803f061340091f636f4a9f29a84b6d6a45de81755bd3d
- MD5 e27a1d2f1596f03b673d462d077383db
- SHA1 c2674391c0ba6e591b8d801c0a0d52173495418c
- SHA512 d11d1ab137edcac01624eb39aa04063b507518e4e50ca44905be1f9ac8f5adb302cc22089777cccb5c295f40fb79cff02ad5d4cc03703511af21ca18a7412334
- SSDEEP 24576:UCJeo5NXUCvxwJfuvKYoKPDorlej6N82bJM1+XsxtYkgb9SddLlzVhWWXc2UhpLB:/WuAw8sdg5C55VhWosp9l
- TLSH T18BE53840E600812ADCFB11F54AAE713C615CBDE44764A1CBA1D87AFA9B763F03D3964B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1