General
- Target 2026-09-09_c18215f7ae5905fcc940a9bb5f3534bc_amadey_elex_smoke-loader_stealc_stop
- Size 7.5MB
- Sample260909-pp7awscb96
- SHA256 5d9590cc6946b526b26c31b8882a97a6635d2513f183b164c4ff6da27783be99
- MD5 c18215f7ae5905fcc940a9bb5f3534bc
- SHA1 42e2c09d297422972da83235c191c6a18bd9731d
- SHA512 1d8b930c08d7f3bb29beb097458a861a24b758b6e4fa4d12621172bb5dd10a9c00e92632c3092d19eea8e350115e9b43a01ac706a81e3be11e7d74c7fb55572a
- SSDEEP 196608:BDlzFnyNNTWraEnbgZbEueqcpLm58fcpRA1MH41:BDRFyNMTbgWueqqm58047
- TLSH T1F68633213699B431C53484376CC72B40FDF8C65926A758C6ABCC2EB93E286E0D736767
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_c18215f7ae5905fcc940a9bb5f3534bc_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_c18215f7ae5905fcc940a9bb5f3534bc_amadey_elex_smoke-loader_stealc_stop
- Size 7.5MB
- SHA256 5d9590cc6946b526b26c31b8882a97a6635d2513f183b164c4ff6da27783be99
- MD5 c18215f7ae5905fcc940a9bb5f3534bc
- SHA1 42e2c09d297422972da83235c191c6a18bd9731d
- SHA512 1d8b930c08d7f3bb29beb097458a861a24b758b6e4fa4d12621172bb5dd10a9c00e92632c3092d19eea8e350115e9b43a01ac706a81e3be11e7d74c7fb55572a
- SSDEEP 196608:BDlzFnyNNTWraEnbgZbEueqcpLm58fcpRA1MH41:BDRFyNMTbgWueqqm58047
- TLSH T1F68633213699B431C53484376CC72B40FDF8C65926A758C6ABCC2EB93E286E0D736767
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL