General
- Target 2026-10-28_47474b7e84510b938bc170073dbd9609_amadey_elex_smoke-loader_stop
- Size 493KB
- Sample261028-ph62jsgd55
- SHA256 70efbf45684f5315da92a3b60f2de9b3534d92ef2dd3e98f5128c6d5a0f91239
- MD5 47474b7e84510b938bc170073dbd9609
- SHA1 674f1576b3ad8f532cef6ded1d94d2048960bb7e
- SHA512 7761ab228426303bc1ee7213cd0eef5f7ddb466c21cd31dfae891651d194c0ab051f63af2c87204c28e016d83bca73bbb873ae2151d711781706210123412cf9
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptk/:BOlx4kk9HKda4YBQi4kVdcQzjj
- TLSH T19FB4BF213780C035E3A613328996E1B56A657D345AA4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_47474b7e84510b938bc170073dbd9609_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-28_47474b7e84510b938bc170073dbd9609_amadey_elex_smoke-loader_stop
- Size 493KB
- SHA256 70efbf45684f5315da92a3b60f2de9b3534d92ef2dd3e98f5128c6d5a0f91239
- MD5 47474b7e84510b938bc170073dbd9609
- SHA1 674f1576b3ad8f532cef6ded1d94d2048960bb7e
- SHA512 7761ab228426303bc1ee7213cd0eef5f7ddb466c21cd31dfae891651d194c0ab051f63af2c87204c28e016d83bca73bbb873ae2151d711781706210123412cf9
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptk/:BOlx4kk9HKda4YBQi4kVdcQzjj
- TLSH T19FB4BF213780C035E3A613328996E1B56A657D345AA4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE