General
- Target 2026-10-26_5d305ade328d5f40f5f672f0ce7eba88_amadey_elex_nionspy_smoke-loader
- Size 1.5MB
- Sample261027-tx9hfaea53
- SHA256 9bd00a353d24a4152203d8005386f0875c1cb14a4489d6cd5bbe1ae271570fbc
- MD5 5d305ade328d5f40f5f672f0ce7eba88
- SHA1 c9fa46e502ce6083db6a32a5906078ab0ea521a9
- SHA512 a683f11b98ee2b4ba8ce84a196fee2dbfad604efea08a09fc453985ce922814864d86b8417059c8a3c7528899746a0b3b78b658d919b0dd7084b498a79e2496b
- SSDEEP 24576:tp6xWv9NwsDjHp6xWv9NwsDjLp6xWv9NwsDjHYp6xWv9NwsDjHp6xWv9NwsDjLpz:Dz9C0tz9C0hz9C0Wz9C0tz9C0hz9C0
- TLSH T15F658E00B6E0C4B2D85666B440ABAB760D7D36352F26E5D3F7601E649D603F2BE3436E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_5d305ade328d5f40f5f672f0ce7eba88_amadey_elex_nionspy_smoke-loader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_5d305ade328d5f40f5f672f0ce7eba88_amadey_elex_nionspy_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_5d305ade328d5f40f5f672f0ce7eba88_amadey_elex_nionspy_smoke-loader
- Size 1.5MB
- SHA256 9bd00a353d24a4152203d8005386f0875c1cb14a4489d6cd5bbe1ae271570fbc
- MD5 5d305ade328d5f40f5f672f0ce7eba88
- SHA1 c9fa46e502ce6083db6a32a5906078ab0ea521a9
- SHA512 a683f11b98ee2b4ba8ce84a196fee2dbfad604efea08a09fc453985ce922814864d86b8417059c8a3c7528899746a0b3b78b658d919b0dd7084b498a79e2496b
- SSDEEP 24576:tp6xWv9NwsDjHp6xWv9NwsDjLp6xWv9NwsDjHYp6xWv9NwsDjHp6xWv9NwsDjLpz:Dz9C0tz9C0hz9C0Wz9C0tz9C0hz9C0
- TLSH T15F658E00B6E0C4B2D85666B440ABAB760D7D36352F26E5D3F7601E649D603F2BE3436E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE