Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 22:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_99291b20add4607665564337afea3e7e_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_99291b20add4607665564337afea3e7e_amadey_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-09-19_99291b20add4607665564337afea3e7e_amadey_elex_smoke-loader_stop.exe
- Size 6.6MB
- Sample260919-2qlrssxgld
- SHA256 80190ab5aac2ead0e28d836ff00f9de61e6abedfd4ccd0dc4c97264e349f77f5
- MD5 99291b20add4607665564337afea3e7e
- SHA1 b168253d20cfe2f4ad26e142afb07fa78903c183
- SHA512 f633326fcb2d7bd9bdabdee2da9ea2992ec5c63eae082c0c5bf3cc555b0b54a1120244d31c967f609ccc04707c3bc594a8f0e22e09e8c98a8e71e0e0afd9a622
- SSDEEP 196608:jPhzFwnX/kOyKC8hBGTY7qzGcvRnSmyTSBVD+BWfszNp0:bhSby01XcvhisV6BWfee
- TLSH T12E663316A496CC33F87B0535CC8AE76ADFB8B5966F1544D363C51B180F91AF28B3270A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-19_99291b20add4607665564337afea3e7e_amadey_elex_smoke-loader_stop.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\fuu_-win-g2000-1_1-ea7\How To\Japanese\images\image_exeicon.gif
- Size 1KB
- SHA256 5a9025a00c956bab8a68aa20cc988a00b8167d88225c2fca47c495d98d28e846
- MD5 2aca5f8b891cbbcfeced9fe8b0aadded
- SHA1 a3972da710b76e93bb79756b10e596458700ae73
- SHA512 ab6c98678d019f762e24a9f66e13a4f147a25a7cb072b1d2b3b0bd5c4dcd483cb5aa27ef5003efeacfaa167f67a968888d5a81b757364e22fb736e53089586ed
- TLSH T130212DFCB58336A15B1B8467AC33C18925D84BA2F6010BB2B7134C72807346DC51E243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\fuu_-win-g2000-1_1-ea7\How To\Japanese\images\page_top.gif
- Size 186B
- SHA256 f6c0fe7c91500b5ca23b3f24094b016b88e7417d26da61bba95867d083ce4a56
- MD5 4c4b5c502ff7db5d94aab303e19e0bb1
- SHA1 5ae169c6e6e5c7f5530438575096f2b1b81abba6
- SHA512 f307bc0fe2b5db38de5a115d4b897beb18300d68706b428a07ecfa2d666a73909f9be29464bd90d2672014bb7e0a7f86dc1ea16ecba9c132c35e5c916e94b96a
- TLSH T181C08CA286849A59D1A639B8CE3382877415A14A02B2840F201C2323B04127591E45E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\fuu_-win-g2000-1_1-ea7\How To\Simplified_Chinese\images\i_important.gif
- Size 223B
- SHA256 4cce43af6e45ff1eb182604937789f62834a1b278d44d8edede5030b0ac00b75
- MD5 8ac9731647328b607d863c192a31c327
- SHA1 e31b3aff62b77f7f42f600ab6f1e027ef5d89104
- SHA512 f86e4962678d8869332a16f54b02c6cb42c64bd702ea61d827900dbf753898de46aa8f04aa9d05c1e168cb0d664b5b10fa7da6ee19cc571f6577a46c14c02d3a
- TLSH T128D022ACB02CA40AD8002138A494019E60300A891202400F108A36F9D1C20580C870A6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\fuu_-win-g2000-1_1-ea7\How To\Simplified_Chinese\images\i_note.gif
- Size 313B
- SHA256 d32a4a69c3c6a7eab57e241a7ef12205aabbffe30a65e86fbffbf9655c63ea4e
- MD5 6315ac14938006afce03f5165de3f0d6
- SHA1 fbaebfbe4830143320c309785142a944a7d82b8e
- SHA512 626f5e6d680e9f6278f821c8ea0b2888c1ae1fa9ef816704bbb53d4ebf77fa4002820d2eabd1ab34611df668fc4a71ec01e4c5d61d71b6984e0f3563a7be0810
- TLSH T1A3E0EB0344B7C8DBCBC0EC380B281A801E4D2B07F6C293EE0BD145E8BB0D71B90CA102
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\fuu_-win-g2000-1_1-ea7\How To\Simplified_Chinese\topic_e.css
- Size 6KB
- SHA256 6f07a0c06e0162013531497264fff14dc86d01cacbaf46ea4571505bc1cfec7d
- MD5 b905bc9981685fb64b142060867c08af
- SHA1 bcc5b681771c6766aed6f4dede92c089ec01e26f
- SHA512 2af51d01a556a2d16dbe937aa0aa6f63cb2ac855fab58a2519a49a1bd110ba6259fe3697db9ff8632326eb1548540d672af8ff8b37435f3300b5da2e2bc1d7ac
- SSDEEP 96:G/DS5CRo0l80evYBFT3cQ/OI0wu+CCJ/XTfjJ7Ckg:GLcklJevYBFT3zCCdXTbAkg
- TLSH T1CEE1E1ADDB95204FF36A6A87FBB34E942F0D44706D2EC234E7A51618F08147137B5785
- MD5 SHA1 SHA512 SSDEEP TLSH