General
- Target 2026-10-28_fdaf6b3d387ab1f3f8cea5413132a51d_amadey_elex_smoke-loader_stop
- Size 485KB
- Sample261029-bat55av1ew
- SHA256 b048f58c5792ee4ac1513f55facc03d05a47b7f1ac85466ba547b97016f754af
- MD5 fdaf6b3d387ab1f3f8cea5413132a51d
- SHA1 0fe96e7a3a7da1dfee4d4e6f6445e2f6c8a59c96
- SHA512 9239b4850768969fce70b8f236309a81dd871c58688272622d055ac5d24382449fa079d401f1bc3b464afd1337e55dcfb51f21417cec1153b6758335c8712200
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYpT:BOlx4kk9HKda4YBQi4kVdcQzjE
- TLSH T119B4BE213780C035E3A623328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_fdaf6b3d387ab1f3f8cea5413132a51d_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-28_fdaf6b3d387ab1f3f8cea5413132a51d_amadey_elex_smoke-loader_stop
- Size 485KB
- SHA256 b048f58c5792ee4ac1513f55facc03d05a47b7f1ac85466ba547b97016f754af
- MD5 fdaf6b3d387ab1f3f8cea5413132a51d
- SHA1 0fe96e7a3a7da1dfee4d4e6f6445e2f6c8a59c96
- SHA512 9239b4850768969fce70b8f236309a81dd871c58688272622d055ac5d24382449fa079d401f1bc3b464afd1337e55dcfb51f21417cec1153b6758335c8712200
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYpT:BOlx4kk9HKda4YBQi4kVdcQzjE
- TLSH T119B4BE213780C035E3A623328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE