General
- Target 2026-09-10_cf5967a20549f77bd2d716d068a94dd6_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 948KB
- Sample260910-mdxafavvcz
- SHA256 7088c865d59713ab80d11d8f64548b601ab3033be4f5c755d773a1e0b824050a
- MD5 cf5967a20549f77bd2d716d068a94dd6
- SHA1 ede1035845a903257530503a3a784c9d351f186a
- SHA512 d50ebcda4c1d7b49f01c6f033a31c6bc0371055c94e4c61642232294e97584e9c5523987b16197fbdcfb83c44cdc05381f1470821ea1fdf7e354316bbd339a98
- SSDEEP 12288:+wKfOVRo9yRYkUfvIGLUh7Wk/L40L/zIqX:+xWVeyRYbvIG8BTVBX
- TLSH T1A5251902F294D925E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_cf5967a20549f77bd2d716d068a94dd6_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_cf5967a20549f77bd2d716d068a94dd6_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_cf5967a20549f77bd2d716d068a94dd6_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 948KB
- SHA256 7088c865d59713ab80d11d8f64548b601ab3033be4f5c755d773a1e0b824050a
- MD5 cf5967a20549f77bd2d716d068a94dd6
- SHA1 ede1035845a903257530503a3a784c9d351f186a
- SHA512 d50ebcda4c1d7b49f01c6f033a31c6bc0371055c94e4c61642232294e97584e9c5523987b16197fbdcfb83c44cdc05381f1470821ea1fdf7e354316bbd339a98
- SSDEEP 12288:+wKfOVRo9yRYkUfvIGLUh7Wk/L40L/zIqX:+xWVeyRYbvIG8BTVBX
- TLSH T1A5251902F294D925E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory