General
- Target 2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop
- Size 511KB
- Sample261028-2dtxmsvtht
- SHA256 1096aeb4c04ed9654bbf35a61dfcc718887fe60a9e1384e311469234a15191da
- MD5 ca364c8986c2f4a4259da2fa350856ef
- SHA1 8e31c5e7454a72c8227229489dc88242dce55fd6
- SHA512 671da0d8f1c90555a3d53081b60f94b0e2206dab4728fdedb5a7fdcdfc7208bd5595ac3e9f5e1e969c031a66961219e1cb2a2e93317b1050bd35bfab3e6f7254
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFK:j/D0caF8wvhb43pDbK
- TLSH T176B4BE113650C436E32A177148C6FAF46AA9BC3549A5E64FFA787F395E301934A3B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-10-27_ca364c8986c2f4a4259da2fa350856ef_amadey_elex_smoke-loader_stealc_stop
- Size 511KB
- SHA256 1096aeb4c04ed9654bbf35a61dfcc718887fe60a9e1384e311469234a15191da
- MD5 ca364c8986c2f4a4259da2fa350856ef
- SHA1 8e31c5e7454a72c8227229489dc88242dce55fd6
- SHA512 671da0d8f1c90555a3d53081b60f94b0e2206dab4728fdedb5a7fdcdfc7208bd5595ac3e9f5e1e969c031a66961219e1cb2a2e93317b1050bd35bfab3e6f7254
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFK:j/D0caF8wvhb43pDbK
- TLSH T176B4BE113650C436E32A177148C6FAF46AA9BC3549A5E64FFA787F395E301934A3B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE