General
- Target 2026-10-10_b7c24f59635d19c2de5be3e6c6d25c83_amadey_elex_smoke-loader_stop
- Size 493KB
- Sample261011-e3d66aez9t
- SHA256 e66acaa1e198e0afb6694c2fccbb81fb42c61ca43978e7f6d9ca5de8d458aa81
- MD5 b7c24f59635d19c2de5be3e6c6d25c83
- SHA1 58bb7a6819045e8ba7b264b9d6d5a8c63ba4b981
- SHA512 02dce7695f9184d8a9d724986d2660f7e98a1b1ebc7c969f9e9239d3d58afea3831a15258e91d557661fe3fac2f5aa7ba1c194914f8e7fcd55f04a929876395e
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkQ:BOlx4kk9HKda4YBQi4kVdcQzjk
- TLSH T185B4BF213780C035E3A623328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_b7c24f59635d19c2de5be3e6c6d25c83_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-10_b7c24f59635d19c2de5be3e6c6d25c83_amadey_elex_smoke-loader_stop
- Size 493KB
- SHA256 e66acaa1e198e0afb6694c2fccbb81fb42c61ca43978e7f6d9ca5de8d458aa81
- MD5 b7c24f59635d19c2de5be3e6c6d25c83
- SHA1 58bb7a6819045e8ba7b264b9d6d5a8c63ba4b981
- SHA512 02dce7695f9184d8a9d724986d2660f7e98a1b1ebc7c969f9e9239d3d58afea3831a15258e91d557661fe3fac2f5aa7ba1c194914f8e7fcd55f04a929876395e
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkQ:BOlx4kk9HKda4YBQi4kVdcQzjk
- TLSH T185B4BF213780C035E3A623328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE