General
- Target 2026-09-12_4faa74cea4b204b4cbeba9d83aef115b_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample260913-cevg5asscs
- SHA256 9a62846b59a4b5eacb5d58a975b87f896a190cd85b19b47f68ac9522c9172f94
- MD5 4faa74cea4b204b4cbeba9d83aef115b
- SHA1 5f74fae7c22080137b733f8ee3bcb99a5b3842e7
- SHA512 8f22662957fccb3caa5d32f1f79707486de28590637e01be98dff5f30507884c85c3b3a594938387b8b00d67d6db10e8306c0ef68fe8fa98a4523f2b548d9478
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP0lEG3u2GxFxmwLsazt5s1HcLte7c7sHR:JRek9CkhN3oczlEGe2G3wazte2Y
- TLSH T1FE94E0E672D5D032F0D315321AA9CAA1293ABD30672E50CBB754BB7D6EB13C19E71603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_4faa74cea4b204b4cbeba9d83aef115b_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_4faa74cea4b204b4cbeba9d83aef115b_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_4faa74cea4b204b4cbeba9d83aef115b_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 9a62846b59a4b5eacb5d58a975b87f896a190cd85b19b47f68ac9522c9172f94
- MD5 4faa74cea4b204b4cbeba9d83aef115b
- SHA1 5f74fae7c22080137b733f8ee3bcb99a5b3842e7
- SHA512 8f22662957fccb3caa5d32f1f79707486de28590637e01be98dff5f30507884c85c3b3a594938387b8b00d67d6db10e8306c0ef68fe8fa98a4523f2b548d9478
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSP0lEG3u2GxFxmwLsazt5s1HcLte7c7sHR:JRek9CkhN3oczlEGe2G3wazte2Y
- TLSH T1FE94E0E672D5D032F0D315321AA9CAA1293ABD30672E50CBB754BB7D6EB13C19E71603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE