General
- Target 2026-09-25_c11bd605a7bfa93e3f43e71cce1cd05d_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 17.3MB
- Sample260925-yyvg5awbqa
- SHA256 c4deb83ef667a813a7a5ef8ea4558f3c306686103b38528a73490c3b77d464ac
- MD5 c11bd605a7bfa93e3f43e71cce1cd05d
- SHA1 dc1aa5e2f3b4af0ed8938c0b2659478a99d0b3ac
- SHA512 2c6b47f242201d141af88bca7ea204f01129250701d184a6480e29940ee17458740f2963526409d3edf25c6b77949665ded6e2650b5706d600b7840c76bb06c9
- SSDEEP 393216:E8eID199lWxZ5FF49KLVddlAKcGPbrOmHpR9k+8LgQlwzVKN:E8R9l6z4wLjcGTaz1Hp
- TLSH T1700733623152AE79C41683371581E7B2E47DBD05A524A345FFF89E0B3B70FA2D20A61F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_c11bd605a7bfa93e3f43e71cce1cd05d_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-25_c11bd605a7bfa93e3f43e71cce1cd05d_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_c11bd605a7bfa93e3f43e71cce1cd05d_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 17.3MB
- SHA256 c4deb83ef667a813a7a5ef8ea4558f3c306686103b38528a73490c3b77d464ac
- MD5 c11bd605a7bfa93e3f43e71cce1cd05d
- SHA1 dc1aa5e2f3b4af0ed8938c0b2659478a99d0b3ac
- SHA512 2c6b47f242201d141af88bca7ea204f01129250701d184a6480e29940ee17458740f2963526409d3edf25c6b77949665ded6e2650b5706d600b7840c76bb06c9
- SSDEEP 393216:E8eID199lWxZ5FF49KLVddlAKcGPbrOmHpR9k+8LgQlwzVKN:E8R9l6z4wLjcGTaz1Hp
- TLSH T1700733623152AE79C41683371581E7B2E47DBD05A524A345FFF89E0B3B70FA2D20A61F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.