General
- Target 2026-09-03_a74ed8f67adb09b0af7d013fab5d1855_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260905-18pezazzgy
- SHA256 143dba1f02b91ddcffb9b55825a602cfe73ab0444f225d4b63e4ab3a0eeb1558
- MD5 a74ed8f67adb09b0af7d013fab5d1855
- SHA1 fb2dfec9091b0d5bea226e5e7e8914ea6a95757d
- SHA512 68938fd274193841e34605e8f7abe06aa61122f48501093ca0c175d427be8da140145da5f26cbd8fa31b65a62b6aadb3ed36da6e0e6592d5932eff2cfdf6bd70
- SSDEEP 49152:SYp95kv14xYvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivy6vkcD+v49pN/3
- TLSH T12CD522ED91E15219BC42211A3AD6FAE048F5E7563BBE38E3DFC32594953B09ADE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_a74ed8f67adb09b0af7d013fab5d1855_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-03_a74ed8f67adb09b0af7d013fab5d1855_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_a74ed8f67adb09b0af7d013fab5d1855_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 143dba1f02b91ddcffb9b55825a602cfe73ab0444f225d4b63e4ab3a0eeb1558
- MD5 a74ed8f67adb09b0af7d013fab5d1855
- SHA1 fb2dfec9091b0d5bea226e5e7e8914ea6a95757d
- SHA512 68938fd274193841e34605e8f7abe06aa61122f48501093ca0c175d427be8da140145da5f26cbd8fa31b65a62b6aadb3ed36da6e0e6592d5932eff2cfdf6bd70
- SSDEEP 49152:SYp95kv14xYvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivy6vkcD+v49pN/3
- TLSH T12CD522ED91E15219BC42211A3AD6FAE048F5E7563BBE38E3DFC32594953B09ADE1C301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1