General
- Target 2026-10-28_79d6e4e7c6b5d14568ded8651bb54971_amadey_elex_smoke-loader_stop
- Size 586KB
- Sample261028-l6s8tabv4y
- SHA256 c87bcef3815c34010cc2319c5355a53de5d19414e0f9450d53b7ba37f8e9d78e
- MD5 79d6e4e7c6b5d14568ded8651bb54971
- SHA1 2dee75cc3eae4de20b802c2b043d09a3a6e004be
- SHA512 dcda6ad4a53f5024869f95e8e41db05c9eee49ab9604ee047d2533dc29fec9df93df9dc5f8f596f6fe620e9d397e5dcee8dce64062d6c3a8459efd79fa47236c
- SSDEEP 12288:SccNvdRExZGe+Q1nzPqmoWkI09HPZkiMgtr:SnPfQpziAkI09HLMgd
- TLSH T1E3D4C0243790C072E3662B754896F7B51BBA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_79d6e4e7c6b5d14568ded8651bb54971_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-28_79d6e4e7c6b5d14568ded8651bb54971_amadey_elex_smoke-loader_stop
- Size 586KB
- SHA256 c87bcef3815c34010cc2319c5355a53de5d19414e0f9450d53b7ba37f8e9d78e
- MD5 79d6e4e7c6b5d14568ded8651bb54971
- SHA1 2dee75cc3eae4de20b802c2b043d09a3a6e004be
- SHA512 dcda6ad4a53f5024869f95e8e41db05c9eee49ab9604ee047d2533dc29fec9df93df9dc5f8f596f6fe620e9d397e5dcee8dce64062d6c3a8459efd79fa47236c
- SSDEEP 12288:SccNvdRExZGe+Q1nzPqmoWkI09HPZkiMgtr:SnPfQpziAkI09HLMgd
- TLSH T1E3D4C0243790C072E3662B754896F7B51BBA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE