General
- Target 2026-08-29_fdf1ce7309a9a8ad6039bba1a089bb1f_amadey_elex_loda_smoke-loader
- Size 2.2MB
- Sample260830-2rrpfadg25
- SHA256 c2443cfdb85b8a895bf8e4eeff5de1e5ae7a3a69e223f7cbb98b99990af03f26
- MD5 fdf1ce7309a9a8ad6039bba1a089bb1f
- SHA1 b94778ece446d10dfcc484e91431a62b9346a5ad
- SHA512 8b68afd77fb223c2f97c4217036171ab1fd96974759bf319bdeddd411aa75a77545400f654f2d3d61471b35229fdbf3a555656144c44df90464973eea03f8d99
- SSDEEP 24576:aW2a2VNyYJn/RkWq1PVafj2Aorp6im3FxguTyv7adCTK///0FHIP2/ed2EwyK:aioDJnJOk72ACpOxjyvmg+/X0Fh/eoR3
- TLSH T188B5F192F344ACE9E40315B59C7ACA12640B7F7D4AB9550E368E762E55F338220B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-29_fdf1ce7309a9a8ad6039bba1a089bb1f_amadey_elex_loda_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-29_fdf1ce7309a9a8ad6039bba1a089bb1f_amadey_elex_loda_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-29_fdf1ce7309a9a8ad6039bba1a089bb1f_amadey_elex_loda_smoke-loader
- Size 2.2MB
- SHA256 c2443cfdb85b8a895bf8e4eeff5de1e5ae7a3a69e223f7cbb98b99990af03f26
- MD5 fdf1ce7309a9a8ad6039bba1a089bb1f
- SHA1 b94778ece446d10dfcc484e91431a62b9346a5ad
- SHA512 8b68afd77fb223c2f97c4217036171ab1fd96974759bf319bdeddd411aa75a77545400f654f2d3d61471b35229fdbf3a555656144c44df90464973eea03f8d99
- SSDEEP 24576:aW2a2VNyYJn/RkWq1PVafj2Aorp6im3FxguTyv7adCTK///0FHIP2/ed2EwyK:aioDJnJOk72ACpOxjyvmg+/X0Fh/eoR3
- TLSH T188B5F192F344ACE9E40315B59C7ACA12640B7F7D4AB9550E368E762E55F338220B7E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE