General
- Target 2026-10-23_46ea3d76062e4ad6a1617f17393347b0_amadey_elex_smoke-loader_stealc_tofsee
- Size 416KB
- Sample261023-p29lsasv2r
- SHA256 333c8836677b3a40d3ffc1ef0ea5d08a7b70e96501597982e6c37c6bac720357
- MD5 46ea3d76062e4ad6a1617f17393347b0
- SHA1 80848e854c345a942b9c4af1d8b4f095eb6c50a1
- SHA512 b6dd2d1971cf1321284ded242b79d84ee3e0275c33c575ea4c3677bd0f9c3301588ac7b1a5fe46b8bc87f1c67b94914d68f5149d90f1e0ea16cfdf56d0362aae
- SSDEEP 6144:SclgVrkccVxjfYNftqZe9+Hc0RLG0aOBAf70GbjUwMD9n/lR7e+XpMS2:BeVoDVxjQ1gXHcuLHBS/MD9tR71M
- TLSH T1B394BF217240C039F7A6073189B2E6F559686D3567A4A08FF3687D7A2E312C39A3335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-23_46ea3d76062e4ad6a1617f17393347b0_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-10-23_46ea3d76062e4ad6a1617f17393347b0_amadey_elex_smoke-loader_stealc_tofsee
- Size 416KB
- SHA256 333c8836677b3a40d3ffc1ef0ea5d08a7b70e96501597982e6c37c6bac720357
- MD5 46ea3d76062e4ad6a1617f17393347b0
- SHA1 80848e854c345a942b9c4af1d8b4f095eb6c50a1
- SHA512 b6dd2d1971cf1321284ded242b79d84ee3e0275c33c575ea4c3677bd0f9c3301588ac7b1a5fe46b8bc87f1c67b94914d68f5149d90f1e0ea16cfdf56d0362aae
- SSDEEP 6144:SclgVrkccVxjfYNftqZe9+Hc0RLG0aOBAf70GbjUwMD9n/lR7e+XpMS2:BeVoDVxjQ1gXHcuLHBS/MD9tR71M
- TLSH T1B394BF217240C039F7A6073189B2E6F559686D3567A4A08FF3687D7A2E312C39A3335F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE