General
- Target 2026-10-22_b5e484c5d2e2e3f0da908c4a0fb50078_amadey_elex_smoke-loader_stealc_stop
- Size 1.5MB
- Sample261023-3ll3faew5x
- SHA256 62626f11dd89d1251577dc42eca196892807d008ce1cd7e86ccce6f44b595e51
- MD5 b5e484c5d2e2e3f0da908c4a0fb50078
- SHA1 dce61cdaa86b677e35b0f2e1abc192042c8a3a26
- SHA512 15e2619634c447ee1815544719e743d08f4a6f341c6d434319086dd861d18ed5700c251f0a71222d6525196312deade58f025507cb9d83069082546a58255e25
- SSDEEP 24576:0dnkMGx6yYckgXu4eArh1s2MFY9hPC0rUIGa6u5t82oNo1m/TQSRbzzmzK8dN0bi:VDS7U990ilC/Ijv8pNmm5bzzNJG
- TLSH T1B375236232C0C071E5671536A9A9CB32A9B5BC391378D98E7B954E3F6F30B91C631783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_b5e484c5d2e2e3f0da908c4a0fb50078_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_b5e484c5d2e2e3f0da908c4a0fb50078_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_b5e484c5d2e2e3f0da908c4a0fb50078_amadey_elex_smoke-loader_stealc_stop
- Size 1.5MB
- SHA256 62626f11dd89d1251577dc42eca196892807d008ce1cd7e86ccce6f44b595e51
- MD5 b5e484c5d2e2e3f0da908c4a0fb50078
- SHA1 dce61cdaa86b677e35b0f2e1abc192042c8a3a26
- SHA512 15e2619634c447ee1815544719e743d08f4a6f341c6d434319086dd861d18ed5700c251f0a71222d6525196312deade58f025507cb9d83069082546a58255e25
- SSDEEP 24576:0dnkMGx6yYckgXu4eArh1s2MFY9hPC0rUIGa6u5t82oNo1m/TQSRbzzmzK8dN0bi:VDS7U990ilC/Ijv8pNmm5bzzNJG
- TLSH T1B375236232C0C071E5671536A9A9CB32A9B5BC391378D98E7B954E3F6F30B91C631783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.