General
- Target 2026-08-19_0697e210694f20b3cc2081c2935705a8_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 37.6MB
- Sample260819-rdfd5swcjf
- SHA256 8206c81b208d9e293381dfdd08f04cf4b1b5e19cf2394862b75899a1e7e5c52b
- MD5 0697e210694f20b3cc2081c2935705a8
- SHA1 5f093435c9590231ea037c184d36cb850e17a7ac
- SHA512 c1ac594b6af510e3d79d9b4db4277eb8ee5d3fa4f4167caccce0303f422e62bf7f96eb2a891c23aa59c24a81878aaaeccb49bde02a895c4347efa57be3eb29af
- SSDEEP 786432:9PlFkhlDMfbNJcMvKuJRUs4lNl4u1lmlnbIErtGkx:9t8D6fV3Us43quP6bIEDx
- TLSH T17C873356331E5277E673B1F162BE1E6349E2382446A43ADF07913F3B4531ABFAD0091A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_0697e210694f20b3cc2081c2935705a8_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_0697e210694f20b3cc2081c2935705a8_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_0697e210694f20b3cc2081c2935705a8_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 37.6MB
- SHA256 8206c81b208d9e293381dfdd08f04cf4b1b5e19cf2394862b75899a1e7e5c52b
- MD5 0697e210694f20b3cc2081c2935705a8
- SHA1 5f093435c9590231ea037c184d36cb850e17a7ac
- SHA512 c1ac594b6af510e3d79d9b4db4277eb8ee5d3fa4f4167caccce0303f422e62bf7f96eb2a891c23aa59c24a81878aaaeccb49bde02a895c4347efa57be3eb29af
- SSDEEP 786432:9PlFkhlDMfbNJcMvKuJRUs4lNl4u1lmlnbIErtGkx:9t8D6fV3Us43quP6bIEDx
- TLSH T17C873356331E5277E673B1F162BE1E6349E2382446A43ADF07913F3B4531ABFAD0091A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE