General
- Target 2026-08-24_aed399451e53c15de4f38bfff65e4fe5_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260825-esd4easwgz
- SHA256 4ae001a1e448add0f39df4b5c73956449034ed07d461cb46e10cbc1d76764552
- MD5 aed399451e53c15de4f38bfff65e4fe5
- SHA1 c178d4f0079a84dd1ffb0ecc351f443a9698754d
- SHA512 3f6cfb950fb8ea651d3569c30a530c4fe6fa128448982081c724350ad2b5ff0f9176846edc5d17c53057c2b0da83fb47aa1f172461f6ef06af3fb13e60619c58
- SSDEEP 49152:SYp95kv1XwBRRaO/vhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivc/VvkcD+v49pN/3
- TLSH T189D522E951E15219BC42211A2AD7FAE018F5EB563BBE38E3DFC32594953B09BDE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_aed399451e53c15de4f38bfff65e4fe5_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_aed399451e53c15de4f38bfff65e4fe5_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_aed399451e53c15de4f38bfff65e4fe5_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 4ae001a1e448add0f39df4b5c73956449034ed07d461cb46e10cbc1d76764552
- MD5 aed399451e53c15de4f38bfff65e4fe5
- SHA1 c178d4f0079a84dd1ffb0ecc351f443a9698754d
- SHA512 3f6cfb950fb8ea651d3569c30a530c4fe6fa128448982081c724350ad2b5ff0f9176846edc5d17c53057c2b0da83fb47aa1f172461f6ef06af3fb13e60619c58
- SSDEEP 49152:SYp95kv1XwBRRaO/vhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivc/VvkcD+v49pN/3
- TLSH T189D522E951E15219BC42211A2AD7FAE018F5EB563BBE38E3DFC32594953B09BDE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1