General
- Target 2026-10-21_6e6a431733e762f2beb22f34e4900f5b_amadey_elex_smoke-loader_stealc_tofsee
- Size 450KB
- Sample261022-1769dsfz31
- SHA256 a07cb2b3c830f0cfc2e6fa7182422b0ac15939a39284ddbed73da14f915793fa
- MD5 6e6a431733e762f2beb22f34e4900f5b
- SHA1 d1058a977c6c6df757d17c9f656e7c3b122b4cbd
- SHA512 ddc3850587704ab5c74d0644cd79e058f3e2b23e66e6f75324b5e680a530ac71a26a2723143b987a751d74598bee84d2eaef1864f88e49a22ed7d04be0f80969
- SSDEEP 12288:Ni/tOxL/BkwcKcRu42bjq9BnaHTbea+5tBFp5:NgW/DtQuhq9BaR+53v5
- TLSH T1EEA4C021B640C035E3AA173185A7E6F559686E3413D8E58FF3683E7A1E312D39A3324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-21_6e6a431733e762f2beb22f34e4900f5b_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-10-21_6e6a431733e762f2beb22f34e4900f5b_amadey_elex_smoke-loader_stealc_tofsee
- Size 450KB
- SHA256 a07cb2b3c830f0cfc2e6fa7182422b0ac15939a39284ddbed73da14f915793fa
- MD5 6e6a431733e762f2beb22f34e4900f5b
- SHA1 d1058a977c6c6df757d17c9f656e7c3b122b4cbd
- SHA512 ddc3850587704ab5c74d0644cd79e058f3e2b23e66e6f75324b5e680a530ac71a26a2723143b987a751d74598bee84d2eaef1864f88e49a22ed7d04be0f80969
- SSDEEP 12288:Ni/tOxL/BkwcKcRu42bjq9BnaHTbea+5tBFp5:NgW/DtQuhq9BaR+53v5
- TLSH T1EEA4C021B640C035E3AA173185A7E6F559686E3413D8E58FF3683E7A1E312D39A3324F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE