General
- Target 2026-10-25_b8fcc7095e14c8389ef9a28a4240d226_amadey_elex_smoke-loader_stop
- Size 485KB
- Sample261026-r24fwabc76
- SHA256 6ebf7e0d569788df456074d44244c4d85da1c71bb7a51802b3b515f54f5891af
- MD5 b8fcc7095e14c8389ef9a28a4240d226
- SHA1 e5f0d848702eed3f12d5ff7637654c60101d3b96
- SHA512 db93b8027b68fb162d1d8e0a1fe84c6eff459b9a82d7f8d662f15b3091b423da165bb3b9cb89b5d979e1e3ccb6f7a8772b536ac1685ce0087504fabd4d4c93b6
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYp5:BOlx4kk9HKda4YBQi4kVdcQzjK
- TLSH T11EB4BE217780C035E3A623328996E1B46A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-25_b8fcc7095e14c8389ef9a28a4240d226_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-25_b8fcc7095e14c8389ef9a28a4240d226_amadey_elex_smoke-loader_stop
- Size 485KB
- SHA256 6ebf7e0d569788df456074d44244c4d85da1c71bb7a51802b3b515f54f5891af
- MD5 b8fcc7095e14c8389ef9a28a4240d226
- SHA1 e5f0d848702eed3f12d5ff7637654c60101d3b96
- SHA512 db93b8027b68fb162d1d8e0a1fe84c6eff459b9a82d7f8d662f15b3091b423da165bb3b9cb89b5d979e1e3ccb6f7a8772b536ac1685ce0087504fabd4d4c93b6
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYp5:BOlx4kk9HKda4YBQi4kVdcQzjK
- TLSH T11EB4BE217780C035E3A623328996E1B46A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE