General

  • Target
    2026-09-21_1c15427bb6f068b91da03f52c0778bd6_amadey_elex_smoke-loader
  • Size 304KB
  • Sample260922-dzlamawhrf
  • SHA256 8e971cb1dc8a3a696349ea694a29e28dc4bbf9020c7d949523d5090b21ed71c9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • arkei

Botnet
  • Default

C2
  • file-file-host4.com/tratata.php

Targets

    • Target
      2026-09-21_1c15427bb6f068b91da03f52c0778bd6_amadey_elex_smoke-loader
    • Size 304KB
    • SHA256 8e971cb1dc8a3a696349ea694a29e28dc4bbf9020c7d949523d5090b21ed71c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Arkei

      Arkei is an infostealer written in C++.

    • Custom signature

      Detects executables containing potential Windows Defender anti-emulation checks

MITRE ATT&CK Enterprise v16

Tasks