General
- Target 2026-09-30_0dd88dcd485a1321fdc6deb9a0c9f927_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260930-q986nagh56
- SHA256 b3285abfd7b5314db3e99957387fb7f7e7d4f70a4c4c590eb66b86b505e655f3
- MD5 0dd88dcd485a1321fdc6deb9a0c9f927
- SHA1 34c99798a4601a9ae40b280be606111c12387a4e
- SHA512 0f5bcfe6bc9359b9d01190e030c5a12d52da032af031a827ebc82eb4edece39180c20b5eaa64d7243381b06ed9c990a51353cdc9129e74ed65211eee19c9ac65
- SSDEEP 49152:SYp95kv1iKVNvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivlNvkcD+v49pN/3
- TLSH T13CD522E851E15219BC42211A3AD6FAE009F5E7563BBE38E3DFC32594953B0ABDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_0dd88dcd485a1321fdc6deb9a0c9f927_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_0dd88dcd485a1321fdc6deb9a0c9f927_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_0dd88dcd485a1321fdc6deb9a0c9f927_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 b3285abfd7b5314db3e99957387fb7f7e7d4f70a4c4c590eb66b86b505e655f3
- MD5 0dd88dcd485a1321fdc6deb9a0c9f927
- SHA1 34c99798a4601a9ae40b280be606111c12387a4e
- SHA512 0f5bcfe6bc9359b9d01190e030c5a12d52da032af031a827ebc82eb4edece39180c20b5eaa64d7243381b06ed9c990a51353cdc9129e74ed65211eee19c9ac65
- SSDEEP 49152:SYp95kv1iKVNvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivlNvkcD+v49pN/3
- TLSH T13CD522E851E15219BC42211A3AD6FAE009F5E7563BBE38E3DFC32594953B0ABDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1