General
- Target 2026-10-08_27c6335732dc53d21767c3c721c40bfb_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 37.8MB
- Sample261009-xe8d7sdg42
- SHA256 36f7fbd27fcb9246a50e987f9577a5fa1bebc872f8910703c4c805c2e6924d20
- MD5 27c6335732dc53d21767c3c721c40bfb
- SHA1 a1523bc5153fcd1e3b2d0a96b103d6b40443505a
- SHA512 6e8c4767cad485b5e980b732ea787d9dcdebd62fc24e4c5178136c9288e4c36b846a4f2a29183d84307b68af2bb16dd4c01eb6b760cc30a33a8656180567fcfb
- SSDEEP 786432:cHuJYYAfsBssTrAnIMnuXGbMDZDUKm7W2HxWSubnTwrIErtGk0:0ubKsvAI0MxHwWEx36nkIED0
- TLSH T190973333B82B41B5D05332358552BFB7D8E8D4A5625E7104EB524B6D3A07BA3D222F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_27c6335732dc53d21767c3c721c40bfb_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_27c6335732dc53d21767c3c721c40bfb_amadey_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_27c6335732dc53d21767c3c721c40bfb_amadey_elex_smoke-loader_stealc_stop_tofsee
- Size 37.8MB
- SHA256 36f7fbd27fcb9246a50e987f9577a5fa1bebc872f8910703c4c805c2e6924d20
- MD5 27c6335732dc53d21767c3c721c40bfb
- SHA1 a1523bc5153fcd1e3b2d0a96b103d6b40443505a
- SHA512 6e8c4767cad485b5e980b732ea787d9dcdebd62fc24e4c5178136c9288e4c36b846a4f2a29183d84307b68af2bb16dd4c01eb6b760cc30a33a8656180567fcfb
- SSDEEP 786432:cHuJYYAfsBssTrAnIMnuXGbMDZDUKm7W2HxWSubnTwrIErtGk0:0ubKsvAI0MxHwWEx36nkIED0
- TLSH T190973333B82B41B5D05332358552BFB7D8E8D4A5625E7104EB524B6D3A07BA3D222F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE