General
- Target 2026-10-27_cb5b706bea3d150b563ffefbfba01aa1_amadey_elex_smoke-loader_stealc_stop
- Size 511KB
- Sample261028-15passgv5p
- SHA256 8199c5379cac26493a1a042327c50d67acb2ec434db08c9af5321ef5a6707eae
- MD5 cb5b706bea3d150b563ffefbfba01aa1
- SHA1 64dcad605d33c545e5bd2cf24b475d47a46eba5c
- SHA512 fbf89fa27dffa0450ed083e7c56402aa2946c84a0ee1c4d0b4d247ebbba07fa40830d374b03fed560aee7f01f5da62415319e774187549aea7b01c4818f3c87f
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFC:j/D0caF8wvhb43pDbC
- TLSH T180B4BE113650C436E32A177148C6FBF46AA9BC3549A5E64FFA787F395E301934A2B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-27_cb5b706bea3d150b563ffefbfba01aa1_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-10-27_cb5b706bea3d150b563ffefbfba01aa1_amadey_elex_smoke-loader_stealc_stop
- Size 511KB
- SHA256 8199c5379cac26493a1a042327c50d67acb2ec434db08c9af5321ef5a6707eae
- MD5 cb5b706bea3d150b563ffefbfba01aa1
- SHA1 64dcad605d33c545e5bd2cf24b475d47a46eba5c
- SHA512 fbf89fa27dffa0450ed083e7c56402aa2946c84a0ee1c4d0b4d247ebbba07fa40830d374b03fed560aee7f01f5da62415319e774187549aea7b01c4818f3c87f
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFC:j/D0caF8wvhb43pDbC
- TLSH T180B4BE113650C436E32A177148C6FBF46AA9BC3549A5E64FFA787F395E301934A2B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE