General
- Target 2026-08-20_305a56d1524682189dd7e24256cf45a4_amadey_elex_smoke-loader_stop
- Size 456KB
- Sample260820-gszffsfl4s
- SHA256 8c60d74255a64ed746bc6e064143e0391caf5481cc880beabbe032091940994b
- MD5 305a56d1524682189dd7e24256cf45a4
- SHA1 30c25903b34d026d5b6eb14740148863d78dbcee
- SHA512 c88ca6b009101b09ec095d51e2ef1650aaff6a653cfaf827c6ebc0b2645e23d9d7def74dce3172098f49b70caf704c5bc573d186d98512519e16f263a622f176
- SSDEEP 6144:NK1iEceN+KeoNTYY93dRe7xZGe+Q1Lb3c8AH/R68AuSXBGuaVBt7QwIiZQEszTn2:accNvdRExZGe+Q1nY43x+l7QLiaEy2
- TLSH T19EA4BF153790C072F3652B354996E2F55AA9BC344A64E68FF6B43E395E301938A3B30F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_305a56d1524682189dd7e24256cf45a4_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-20_305a56d1524682189dd7e24256cf45a4_amadey_elex_smoke-loader_stop
- Size 456KB
- SHA256 8c60d74255a64ed746bc6e064143e0391caf5481cc880beabbe032091940994b
- MD5 305a56d1524682189dd7e24256cf45a4
- SHA1 30c25903b34d026d5b6eb14740148863d78dbcee
- SHA512 c88ca6b009101b09ec095d51e2ef1650aaff6a653cfaf827c6ebc0b2645e23d9d7def74dce3172098f49b70caf704c5bc573d186d98512519e16f263a622f176
- SSDEEP 6144:NK1iEceN+KeoNTYY93dRe7xZGe+Q1Lb3c8AH/R68AuSXBGuaVBt7QwIiZQEszTn2:accNvdRExZGe+Q1nY43x+l7QLiaEy2
- TLSH T19EA4BF153790C072F3652B354996E2F55AA9BC344A64E68FF6B43E395E301938A3B30F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE