General
- Target 2026-08-20_44d6ca0573876dc723fa9596353d0880_amadey_elex_smoke-loader_stop
- Size 1.5MB
- Sample260820-h2wxcssbjc
- SHA256 3ca9fdc853ed0b6049b6cceca3ece0fc73759e97457d463466df2f06fec0539f
- MD5 44d6ca0573876dc723fa9596353d0880
- SHA1 b620ffc22c32d6cd1cd8b568b08ef12e7bd4b79b
- SHA512 a62f5ea0429e1cd3ebd6f81813f03e4e52b296202afd4c78a8a4331fa5c4126451005452d60d7496fea5c53dd557561e7d18e7321b1e4c770ce251d4a0a950f5
- SSDEEP 24576:yxI3Hh9ZBXf3gXe4i7ojhsP5Lgrk1TWb4AN5:yO3HhpGe30jaNf1TWbdz
- TLSH T15675CF1177F58435F2F36B71A9B582714A7BBC61AD38C20E23D02A2D5EB0A90DA74737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_44d6ca0573876dc723fa9596353d0880_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_44d6ca0573876dc723fa9596353d0880_amadey_elex_smoke-loader_stop
- Size 1.5MB
- SHA256 3ca9fdc853ed0b6049b6cceca3ece0fc73759e97457d463466df2f06fec0539f
- MD5 44d6ca0573876dc723fa9596353d0880
- SHA1 b620ffc22c32d6cd1cd8b568b08ef12e7bd4b79b
- SHA512 a62f5ea0429e1cd3ebd6f81813f03e4e52b296202afd4c78a8a4331fa5c4126451005452d60d7496fea5c53dd557561e7d18e7321b1e4c770ce251d4a0a950f5
- SSDEEP 24576:yxI3Hh9ZBXf3gXe4i7ojhsP5Lgrk1TWb4AN5:yO3HhpGe30jaNf1TWbdz
- TLSH T15675CF1177F58435F2F36B71A9B582714A7BBC61AD38C20E23D02A2D5EB0A90DA74737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1