General
- Target 2026-10-01_b48327a72ff9bcf8adfb363204eab65f_amadey_elex_smoke-loader
- Size 253KB
- Sample261002-fx6jwsxfjd
- SHA256 f7916edd1769585e7881d20e11f99c0752656494fb1dad4f52e7afb5093f9d16
- MD5 b48327a72ff9bcf8adfb363204eab65f
- SHA1 493d3ebbb001cadeb72df2bef1ef6bcb1bde9359
- SHA512 82b3529070766133c6011aa0fb1586803beeb088ab4523f46518b56313598092c79153b0062c8770282d85a48fda8b99e8ddf761cd6ca8d2cf8a258ad89740b8
- SSDEEP 6144:zs/c9Ja7NHakzKFwBOJGuOmQGjpaTuZTNn:e0aRakzK+BOMwjphZTh
- TLSH T177448D10BBA0C034F1B752F8497993A8B93FB9B16B7490CF52D516EA4639AE0EC31357
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_b48327a72ff9bcf8adfb363204eab65f_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_b48327a72ff9bcf8adfb363204eab65f_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
0003
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
https://cinems.club/search.php
-
https://clothes.surf/search.php
rc4.i32
rc4.i32
Targets
-
- Target 2026-10-01_b48327a72ff9bcf8adfb363204eab65f_amadey_elex_smoke-loader
- Size 253KB
- SHA256 f7916edd1769585e7881d20e11f99c0752656494fb1dad4f52e7afb5093f9d16
- MD5 b48327a72ff9bcf8adfb363204eab65f
- SHA1 493d3ebbb001cadeb72df2bef1ef6bcb1bde9359
- SHA512 82b3529070766133c6011aa0fb1586803beeb088ab4523f46518b56313598092c79153b0062c8770282d85a48fda8b99e8ddf761cd6ca8d2cf8a258ad89740b8
- SSDEEP 6144:zs/c9Ja7NHakzKFwBOJGuOmQGjpaTuZTNn:e0aRakzK+BOMwjphZTh
- TLSH T177448D10BBA0C034F1B752F8497993A8B93FB9B16B7490CF52D516EA4639AE0EC31357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself