General
- Target 2026-08-23_dcbe45d13cfae7594d7e1543280b2e7f_amadey_elex_smoke-loader
- Size 664KB
- Sample260823-w9gpasba43
- SHA256 174507f19f9fa0447e601c83c8954f7893a97e5d742e034c77349e1601b31582
- MD5 dcbe45d13cfae7594d7e1543280b2e7f
- SHA1 364a8a7ef3a418dab50cfc0e9b73e207cbb2b8bb
- SHA512 48cd6b4c694176c8e51d0216d76bcdbe5bb10a43558e0e950d54cf2636c60e8313715b9e8e558f269f25818c181ffcb36f04dbdd194fece786a3b8780d3de14e
- SSDEEP 12288:sQCwYWfjHeBkioNI9m4T2AVSevr5MywkbKn6ciqSgJF3zMScdt:KcfjHeCiob4T2AjvaywesPXMB
- TLSH T1C3E4F201B7A0C038F4F667F4897593B9A62F7DA16B2894CF22952BDA57341D0EE3131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_dcbe45d13cfae7594d7e1543280b2e7f_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_dcbe45d13cfae7594d7e1543280b2e7f_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_dcbe45d13cfae7594d7e1543280b2e7f_amadey_elex_smoke-loader
- Size 664KB
- SHA256 174507f19f9fa0447e601c83c8954f7893a97e5d742e034c77349e1601b31582
- MD5 dcbe45d13cfae7594d7e1543280b2e7f
- SHA1 364a8a7ef3a418dab50cfc0e9b73e207cbb2b8bb
- SHA512 48cd6b4c694176c8e51d0216d76bcdbe5bb10a43558e0e950d54cf2636c60e8313715b9e8e558f269f25818c181ffcb36f04dbdd194fece786a3b8780d3de14e
- SSDEEP 12288:sQCwYWfjHeBkioNI9m4T2AVSevr5MywkbKn6ciqSgJF3zMScdt:KcfjHeCiob4T2AjvaywesPXMB
- TLSH T1C3E4F201B7A0C038F4F667F4897593B9A62F7DA16B2894CF22952BDA57341D0EE3131B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects AutoHotKey binaries acting as second stage droppers
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.