General
- Target 2026-09-09_e11f9aa6a4e75f177f4ac2946fda0dae_amadey_elex_smoke-loader_stop
- Size 490KB
- Sample260910-2fj58ayygz
- SHA256 2620d7d31ad27250a2b36e99dcb39e451421939476ca8df425d47cdc72127606
- MD5 e11f9aa6a4e75f177f4ac2946fda0dae
- SHA1 c02c05f5f1a15b0e97d78391bdd5a52a7e8cf61d
- SHA512 5fec73a67fab0eb132032ea1d7ff4b37412e093fdbbbeeab1323a857b2ecfe0d1e499b6070d575287028d17d5da12e4d9bf62fe363a9ad5b092714201071d959
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkX:BOlx4kk9HKda4YBQi4kVdcQzjr
- TLSH T1A5B4BF213780C035E3A623328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-09_e11f9aa6a4e75f177f4ac2946fda0dae_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-09-09_e11f9aa6a4e75f177f4ac2946fda0dae_amadey_elex_smoke-loader_stop
- Size 490KB
- SHA256 2620d7d31ad27250a2b36e99dcb39e451421939476ca8df425d47cdc72127606
- MD5 e11f9aa6a4e75f177f4ac2946fda0dae
- SHA1 c02c05f5f1a15b0e97d78391bdd5a52a7e8cf61d
- SHA512 5fec73a67fab0eb132032ea1d7ff4b37412e093fdbbbeeab1323a857b2ecfe0d1e499b6070d575287028d17d5da12e4d9bf62fe363a9ad5b092714201071d959
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkX:BOlx4kk9HKda4YBQi4kVdcQzjr
- TLSH T1A5B4BF213780C035E3A623328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE