General
- Target 2026-09-12_89f246479a7da7843cdd720c239d95cb_amadey_elex_smoke-loader_stop
- Size 508KB
- Sample260912-1yllbsag73
- SHA256 f95f0d3fdfc03ffa07f29bd3ff5d3099f1e51f6ce08cc3a88def01dc79f7739f
- MD5 89f246479a7da7843cdd720c239d95cb
- SHA1 34f9680670b1c1c7859be01dd9d8eef68ae2a4f0
- SHA512 5bc496e069cf59941e6b54e1a3009bbd780a5c8e5e7cfd5b10ecd6ed5be817c8963f102d4d66b3506a37dabdeece1fa16254d7473cf75acdeadfc5b6410ad4ec
- SSDEEP 12288:51+b2NFYABXX4e0ne4F2rnXZM0eNpBj/NelN6:n+bcF0e4FCe0KpBIl4
- TLSH T1F3B4291E77FC8676F6F32B31AD79836D4AA6BC205D34C10E23A1191D9971AE0D928733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_89f246479a7da7843cdd720c239d95cb_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_89f246479a7da7843cdd720c239d95cb_amadey_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_89f246479a7da7843cdd720c239d95cb_amadey_elex_smoke-loader_stop
- Size 508KB
- SHA256 f95f0d3fdfc03ffa07f29bd3ff5d3099f1e51f6ce08cc3a88def01dc79f7739f
- MD5 89f246479a7da7843cdd720c239d95cb
- SHA1 34f9680670b1c1c7859be01dd9d8eef68ae2a4f0
- SHA512 5bc496e069cf59941e6b54e1a3009bbd780a5c8e5e7cfd5b10ecd6ed5be817c8963f102d4d66b3506a37dabdeece1fa16254d7473cf75acdeadfc5b6410ad4ec
- SSDEEP 12288:51+b2NFYABXX4e0ne4F2rnXZM0eNpBj/NelN6:n+bcF0e4FCe0KpBIl4
- TLSH T1F3B4291E77FC8676F6F32B31AD79836D4AA6BC205D34C10E23A1191D9971AE0D928733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.