General
- Target 2026-10-26_ef182e9552b07e6774d3322ec5984ac3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- Sample261027-dew7dsh151
- SHA256 ea4b687cf978bc2560e41ca63b978ee1d560671e1efa2f21935588148b0ab889
- MD5 ef182e9552b07e6774d3322ec5984ac3
- SHA1 6a0745e67277c31959d5cf14482effc4dfab6764
- SHA512 a845ac0ba46173b915df9dd3a0d3aedd5d12f2cf887a4ae492b5c29a4142f9acaf75ff36145b9007c47b3c186abb17f07be7a14b64bc842108731cc56eb49c1d
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPDYEhLPI/F25yHSRY1SHL/c1HJYB6MJZksHRu:JRek9CkhN3ocj+I/FM8SRYV1pYB6OtY
- TLSH T10B94E0E672D1D031E1E315330AA9C6B1293ABD70572A21C7B7A4BB6D6EB13C19E75303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_ef182e9552b07e6774d3322ec5984ac3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_ef182e9552b07e6774d3322ec5984ac3_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_ef182e9552b07e6774d3322ec5984ac3_amadey_elex_smoke-loader_stealc_tofsee
- Size 411KB
- SHA256 ea4b687cf978bc2560e41ca63b978ee1d560671e1efa2f21935588148b0ab889
- MD5 ef182e9552b07e6774d3322ec5984ac3
- SHA1 6a0745e67277c31959d5cf14482effc4dfab6764
- SHA512 a845ac0ba46173b915df9dd3a0d3aedd5d12f2cf887a4ae492b5c29a4142f9acaf75ff36145b9007c47b3c186abb17f07be7a14b64bc842108731cc56eb49c1d
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPDYEhLPI/F25yHSRY1SHL/c1HJYB6MJZksHRu:JRek9CkhN3ocj+I/FM8SRYV1pYB6OtY
- TLSH T10B94E0E672D1D031E1E315330AA9C6B1293ABD70572A21C7B7A4BB6D6EB13C19E75303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE