General
- Target 2026-09-21_1c15427bb6f068b91da03f52c0778bd6_amadey_elex_smoke-loader
- Size 304KB
- Sample260922-dzlamawhrf
- SHA256 8e971cb1dc8a3a696349ea694a29e28dc4bbf9020c7d949523d5090b21ed71c9
- MD5 1c15427bb6f068b91da03f52c0778bd6
- SHA1 1ee0f60cae245218a654de05b9214c0091342b44
- SHA512 f94b38ccf2e267c6388c15cee0ceaeccef768a19b732e9dbd396b584736a5acdce44f1a5937b6afaef408e5eb598aaa3f784e81920294c516e5fdb933e400ad7
- SSDEEP 3072:DvB0ByUs9LnqSmu35noj2ev2km1w1YILQchX7pwbtCE15tDomwop1DUdipwuR:xL1FJorv2Tm1FLJh2btj1D5tJEd
- TLSH T194649D00BBA0C435F5F712F899BA93BDA93FB9A15B2590CF22D516EA06746E0DC70317
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_1c15427bb6f068b91da03f52c0778bd6_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
arkei
Botnet
-
Default
C2
-
file-file-host4.com/tratata.php
Targets
-
- Target 2026-09-21_1c15427bb6f068b91da03f52c0778bd6_amadey_elex_smoke-loader
- Size 304KB
- SHA256 8e971cb1dc8a3a696349ea694a29e28dc4bbf9020c7d949523d5090b21ed71c9
- MD5 1c15427bb6f068b91da03f52c0778bd6
- SHA1 1ee0f60cae245218a654de05b9214c0091342b44
- SHA512 f94b38ccf2e267c6388c15cee0ceaeccef768a19b732e9dbd396b584736a5acdce44f1a5937b6afaef408e5eb598aaa3f784e81920294c516e5fdb933e400ad7
- SSDEEP 3072:DvB0ByUs9LnqSmu35noj2ev2km1w1YILQchX7pwbtCE15tDomwop1DUdipwuR:xL1FJorv2Tm1FLJh2btj1D5tJEd
- TLSH T194649D00BBA0C435F5F712F899BA93BDA93FB9A15B2590CF22D516EA06746E0DC70317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects executables containing potential Windows Defender anti-emulation checks