General
- Target 2026-08-22_ebe4bef0b7160f6e9e997a5a01208b95_amadey_elex_smoke-loader_stealc_stop_wannacry
- Size 2.2MB
- Sample260822-1va1esvthw
- SHA256 52edc8b1fedbd173e075b1578db9abfa055e059af814c2d7fdbaf9ae1892bdfc
- MD5 ebe4bef0b7160f6e9e997a5a01208b95
- SHA1 c86417efdf113c1d71b15b0360522dbc5fca13e1
- SHA512 b6563cec3843f15302f61137b8eee816e41659dc4f4030d90293fa641f20cca130267f7e12bfe00d72391092b6f01754be007fbf3fda6c3575d3243a48be71ea
- SSDEEP 49152:QnpaSPbcBVQ7/1UNRx+TSqTdX1HkQo6SAARdhnvw:QpJoB81mRxcSUDk36SAEdhvw
- TLSH T114B5236530A8C0B4C107557044EBCB62F6B6BC3A17BA694FAF904E7E2E63756E311B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_ebe4bef0b7160f6e9e997a5a01208b95_amadey_elex_smoke-loader_stealc_stop_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_ebe4bef0b7160f6e9e997a5a01208b95_amadey_elex_smoke-loader_stealc_stop_wannacry.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_ebe4bef0b7160f6e9e997a5a01208b95_amadey_elex_smoke-loader_stealc_stop_wannacry
- Size 2.2MB
- SHA256 52edc8b1fedbd173e075b1578db9abfa055e059af814c2d7fdbaf9ae1892bdfc
- MD5 ebe4bef0b7160f6e9e997a5a01208b95
- SHA1 c86417efdf113c1d71b15b0360522dbc5fca13e1
- SHA512 b6563cec3843f15302f61137b8eee816e41659dc4f4030d90293fa641f20cca130267f7e12bfe00d72391092b6f01754be007fbf3fda6c3575d3243a48be71ea
- SSDEEP 49152:QnpaSPbcBVQ7/1UNRx+TSqTdX1HkQo6SAARdhnvw:QpJoB81mRxcSUDk36SAEdhvw
- TLSH T114B5236530A8C0B4C107557044EBCB62F6B6BC3A17BA694FAF904E7E2E63756E311B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contacts a large (2184) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE