General
- Target 2026-09-10_8dcbee86fde0321ef5e67c3ece3d43cb_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 948KB
- Sample260910-q51cysvalf
- SHA256 4a92eb5bb158a324ceacd5ab9dc3c4592b40e405b037990721a6c0f8124d75f3
- MD5 8dcbee86fde0321ef5e67c3ece3d43cb
- SHA1 d4f711aafad9744232782cdf6a86fc15b1e5faf8
- SHA512 d1841784a7bc50f350a549737497743246362f41151b00b6fd43cf0a3dc95bb3f78d00d53d2a46a528b9b2b3076fc34644391cc2800917b5a0b4a6ced61ee9b2
- SSDEEP 12288:2wKfOVRo9yRYwUfLiIGLUh7Wk/L40L/zIq3:2xWVeyRY3LiIG8BTVB3
- TLSH T18D251902F294D925E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_8dcbee86fde0321ef5e67c3ece3d43cb_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_8dcbee86fde0321ef5e67c3ece3d43cb_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_8dcbee86fde0321ef5e67c3ece3d43cb_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 948KB
- SHA256 4a92eb5bb158a324ceacd5ab9dc3c4592b40e405b037990721a6c0f8124d75f3
- MD5 8dcbee86fde0321ef5e67c3ece3d43cb
- SHA1 d4f711aafad9744232782cdf6a86fc15b1e5faf8
- SHA512 d1841784a7bc50f350a549737497743246362f41151b00b6fd43cf0a3dc95bb3f78d00d53d2a46a528b9b2b3076fc34644391cc2800917b5a0b4a6ced61ee9b2
- SSDEEP 12288:2wKfOVRo9yRYwUfLiIGLUh7Wk/L40L/zIq3:2xWVeyRY3LiIG8BTVB3
- TLSH T18D251902F294D925E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory