General
- Target 2026-08-19_bd463d0fd5521da60efa99faa29b39ae_amadey_elex_smoke-loader
- Size 2.8MB
- Sample260819-bwhzzscd83
- SHA256 2c9be6d072aaeff2f9e33536128f4f9c7aa0e7b1e432a454b7801979f9ef3110
- MD5 bd463d0fd5521da60efa99faa29b39ae
- SHA1 84fd976a080e765f6eeccb202961f2cf4be92852
- SHA512 a40cdfed60927ae69e84cf80ddc713eee57da2e974b97ca0cd60be5209d14f449c45fa5131d4b6fea2eb18583a57ce438e282b89875c66b8015a924a4fd51b5a
- SSDEEP 24576:UCJeo5NXUCvxwJfuvKYoKPDorlej6N82bJM1+XsxtYkgb9SddLlzVhWWXc2UhmCt:/WuAw8sdg5C55VhWomt
- TLSH T146D52981F6008129D8FB21F54EAE713C614CADE44764A1CB91D876FA9BB63F03D3568B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_bd463d0fd5521da60efa99faa29b39ae_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_bd463d0fd5521da60efa99faa29b39ae_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_bd463d0fd5521da60efa99faa29b39ae_amadey_elex_smoke-loader
- Size 2.8MB
- SHA256 2c9be6d072aaeff2f9e33536128f4f9c7aa0e7b1e432a454b7801979f9ef3110
- MD5 bd463d0fd5521da60efa99faa29b39ae
- SHA1 84fd976a080e765f6eeccb202961f2cf4be92852
- SHA512 a40cdfed60927ae69e84cf80ddc713eee57da2e974b97ca0cd60be5209d14f449c45fa5131d4b6fea2eb18583a57ce438e282b89875c66b8015a924a4fd51b5a
- SSDEEP 24576:UCJeo5NXUCvxwJfuvKYoKPDorlej6N82bJM1+XsxtYkgb9SddLlzVhWWXc2UhmCt:/WuAw8sdg5C55VhWomt
- TLSH T146D52981F6008129D8FB21F54EAE713C614CADE44764A1CB91D876FA9BB63F03D3568B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1