Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 22:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_05e42a97b72f35052e4b83c23a9b77e4_amadey_elex_icedid_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_05e42a97b72f35052e4b83c23a9b77e4_amadey_elex_icedid_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-10-10_05e42a97b72f35052e4b83c23a9b77e4_amadey_elex_icedid_smoke-loader_stealc_stop.exe
- Size 860KB
- Sample261011-2b7eysab23
- SHA256 f783c61ba96bf43239bf88418d5cf7bca4307ab8d72c6a63886b41873761fe8c
- MD5 05e42a97b72f35052e4b83c23a9b77e4
- SHA1 c3743067d7da14173e11e6842fc9f4bf0734bbf5
- SHA512 92d7dfbdd0a012bdc3e15cf935f73caf75d5c7b3d9fd2e8b64267c21f61b29e133fdf6c0280d76339d1033f4dd6f17a62bca71da8e8ee6049b3ada49453c0480
- SSDEEP 6144:6H3PV9VDuCKOYp+rcCfKt5VBVPJ+wm6aTdPucBm89GYa:KKPp0cCfKjLBJ+wni797a
- TLSH T1F4156A1177A0C032D69225724E67C77A5A7AFC319F2582C7B7D03F2DAE706D19A3930A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-10-10_05e42a97b72f35052e4b83c23a9b77e4_amadey_elex_icedid_smoke-loader_stealc_stop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-10_05e42a97b72f35052e4b83c23a9b77e4_amadey_elex_icedid_smoke-loader_stealc_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-10_05e42a97b72f35052e4b83c23a9b77e4_amadey_elex_icedid_smoke-loader_stealc_stop.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1176