General
- Target 2026-09-10_92a81fb31f9db37c9f28abe75559c5f5_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 948KB
- Sample260910-qt4w1acq71
- SHA256 e628dad6662fb3fde20bec24909f2ac7d89e52fe3364baacaa433d804220f3a0
- MD5 92a81fb31f9db37c9f28abe75559c5f5
- SHA1 7caaea704fbc3a7d1afc1e511b7a8ddae00a90e8
- SHA512 d3019a830846d2885dfc9b393c4aff474a81c9a12eeec1c6cca4aa7f7bd2a2151f3cdeeaaf3118ca83f0452b94afcd13454773a7430d0ead0c52819996b0c085
- SSDEEP 12288:+wKfOVRo9yRY0UfdIGLUh7Wk/L40L/zIqX:+xWVeyRYrdIG8BTVBX
- TLSH T188251902F294D925E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_92a81fb31f9db37c9f28abe75559c5f5_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_92a81fb31f9db37c9f28abe75559c5f5_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_92a81fb31f9db37c9f28abe75559c5f5_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 948KB
- SHA256 e628dad6662fb3fde20bec24909f2ac7d89e52fe3364baacaa433d804220f3a0
- MD5 92a81fb31f9db37c9f28abe75559c5f5
- SHA1 7caaea704fbc3a7d1afc1e511b7a8ddae00a90e8
- SHA512 d3019a830846d2885dfc9b393c4aff474a81c9a12eeec1c6cca4aa7f7bd2a2151f3cdeeaaf3118ca83f0452b94afcd13454773a7430d0ead0c52819996b0c085
- SSDEEP 12288:+wKfOVRo9yRY0UfdIGLUh7Wk/L40L/zIqX:+xWVeyRYrdIG8BTVBX
- TLSH T188251902F294D925E4A71E314DB78AB0DA377C696E7187CB364C7B2D3BB27818824717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory