General
- Target 2026-10-21_a136c68a6785ecc1ed7b7cfd897e293c_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample261022-sjyncavv8p
- SHA256 fdf571dd86126a35db47a0f4b98afd413a1885c32ccdc14f334dd99d5b0aa3bd
- MD5 a136c68a6785ecc1ed7b7cfd897e293c
- SHA1 079e0419f509c6b05fb8ef236361b85eb436cf89
- SHA512 824f85c1d333c2ca59c72522f057a2177ea719bbc253c08174600eae6f6e8e2b6b091bd58181b1c44c3d5677e06a7e93d64d5cd55d31c34a8d2fc111b8d0a3c1
- SSDEEP 49152:PYp95kv10NGayW7vhCcD0Tgy0LXu1qoTzmYvr6/T7:wp9iv2NTJvkcD+v49pN/3
- TLSH T18DD522E851E15219BC42211A3AD6FAE048F1EB563BBE78E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_a136c68a6785ecc1ed7b7cfd897e293c_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_a136c68a6785ecc1ed7b7cfd897e293c_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_a136c68a6785ecc1ed7b7cfd897e293c_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 fdf571dd86126a35db47a0f4b98afd413a1885c32ccdc14f334dd99d5b0aa3bd
- MD5 a136c68a6785ecc1ed7b7cfd897e293c
- SHA1 079e0419f509c6b05fb8ef236361b85eb436cf89
- SHA512 824f85c1d333c2ca59c72522f057a2177ea719bbc253c08174600eae6f6e8e2b6b091bd58181b1c44c3d5677e06a7e93d64d5cd55d31c34a8d2fc111b8d0a3c1
- SSDEEP 49152:PYp95kv10NGayW7vhCcD0Tgy0LXu1qoTzmYvr6/T7:wp9iv2NTJvkcD+v49pN/3
- TLSH T18DD522E851E15219BC42211A3AD6FAE048F1EB563BBE78E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1