General
- Target 2026-10-18_822aaa72c16ea3f9d9122c93bb4e5ea7_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample261018-payefacs5j
- SHA256 62036510b2f143bc70346e548d4762e02c290a3f8225e7581a5bd20d6373dfdb
- MD5 822aaa72c16ea3f9d9122c93bb4e5ea7
- SHA1 1c7bd498ad3e5911dd635865ae50ef9c5c03ca35
- SHA512 6aa55c1a5e4f9b4cb985b11bcd023880732e71b6d670f189ad319a950c6a8606db73b2372158d99e94820fdfb5821f60b432db4179f35af357af741e172539a1
- SSDEEP 49152:SYp95kv1U44svhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivuyvkcD+v49pN/3
- TLSH T197D522E991E15219BC42221A3AD7FAE005F1E7563BBE38E3DBC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-18_822aaa72c16ea3f9d9122c93bb4e5ea7_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-18_822aaa72c16ea3f9d9122c93bb4e5ea7_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-18_822aaa72c16ea3f9d9122c93bb4e5ea7_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 62036510b2f143bc70346e548d4762e02c290a3f8225e7581a5bd20d6373dfdb
- MD5 822aaa72c16ea3f9d9122c93bb4e5ea7
- SHA1 1c7bd498ad3e5911dd635865ae50ef9c5c03ca35
- SHA512 6aa55c1a5e4f9b4cb985b11bcd023880732e71b6d670f189ad319a950c6a8606db73b2372158d99e94820fdfb5821f60b432db4179f35af357af741e172539a1
- SSDEEP 49152:SYp95kv1U44svhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivuyvkcD+v49pN/3
- TLSH T197D522E991E15219BC42221A3AD7FAE005F1E7563BBE38E3DBC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1