General
- Target 2026-10-16_cfbfbdb20a5d16bea46cc5193ef6b382_amadey_elex_smoke-loader_stop
- Size 1.5MB
- Sample261017-g61knsty2m
- SHA256 b5017561a9660961a2dba74497c3d60d51b64bcac8edd7c98e9df7cd4438e850
- MD5 cfbfbdb20a5d16bea46cc5193ef6b382
- SHA1 ad867c0e509c74eaed17a5e3341956b5011917bb
- SHA512 493adb5e33d188f165507652e9d01569e9f5fcfc8fa3f55c89fa7fd3ecadb223e5f50b17553384707052d0fa41140afe3a1c08c9161813792a9ab699a048caa3
- SSDEEP 12288:Fn2RlpddRPYXKNcj7wOw5in26VEhTQQ4xZLRCuix7YdvClO/CSLJ7wyn7oOdU:F2XPYXKNie826VEZGqFE/VcK9y
- TLSH T1DF65D02236D0C175C8E321F996DDB67566AEEDA00B2442C727942BEEDD303D25E3478B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_cfbfbdb20a5d16bea46cc5193ef6b382_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_cfbfbdb20a5d16bea46cc5193ef6b382_amadey_elex_smoke-loader_stop
- Size 1.5MB
- SHA256 b5017561a9660961a2dba74497c3d60d51b64bcac8edd7c98e9df7cd4438e850
- MD5 cfbfbdb20a5d16bea46cc5193ef6b382
- SHA1 ad867c0e509c74eaed17a5e3341956b5011917bb
- SHA512 493adb5e33d188f165507652e9d01569e9f5fcfc8fa3f55c89fa7fd3ecadb223e5f50b17553384707052d0fa41140afe3a1c08c9161813792a9ab699a048caa3
- SSDEEP 12288:Fn2RlpddRPYXKNcj7wOw5in26VEhTQQ4xZLRCuix7YdvClO/CSLJ7wyn7oOdU:F2XPYXKNie826VEZGqFE/VcK9y
- TLSH T1DF65D02236D0C175C8E321F996DDB67566AEEDA00B2442C727942BEEDD303D25E3478B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1