General
- Target 2026-11-02_c8b94120939d8503ba89d1b0ce24637e_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- Sample261102-2t6alsxvb1
- SHA256 0a36fad0d36f9f327e9d0388ada7517c19c7a827bcba2fe7ba6833f29b572d02
- MD5 c8b94120939d8503ba89d1b0ce24637e
- SHA1 9ad877b04153a4f7128d927e8a0108ada69366f4
- SHA512 6149221f8a5d888af75087a3c0f9521f9b60868436e6687c3c83a2eab44e473c7c464bfce46bf2297d02a724b9ee4bdd2c27fd9396b5406961b90f95cbb49abc
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPiFByQflJS9jaTSJ2hd9+q9P3IFK5/UUIDC1Q/sx:JRek9CkhN3oclyQL3SQhd9Dwo+Du1J
- TLSH T1A594E19672D1D036E0E315321AECC672297A7E30672A60C7B794BB6DAFB13C15E71603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_c8b94120939d8503ba89d1b0ce24637e_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_c8b94120939d8503ba89d1b0ce24637e_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_c8b94120939d8503ba89d1b0ce24637e_amadey_elex_smoke-loader_stealc_tofsee
- Size 412KB
- SHA256 0a36fad0d36f9f327e9d0388ada7517c19c7a827bcba2fe7ba6833f29b572d02
- MD5 c8b94120939d8503ba89d1b0ce24637e
- SHA1 9ad877b04153a4f7128d927e8a0108ada69366f4
- SHA512 6149221f8a5d888af75087a3c0f9521f9b60868436e6687c3c83a2eab44e473c7c464bfce46bf2297d02a724b9ee4bdd2c27fd9396b5406961b90f95cbb49abc
- SSDEEP 6144:JUPehfcue3U9exwFa0N5FocSPiFByQflJS9jaTSJ2hd9+q9P3IFK5/UUIDC1Q/sx:JRek9CkhN3oclyQL3SQhd9Dwo+Du1J
- TLSH T1A594E19672D1D036E0E315321AECC672297A7E30672A60C7B794BB6DAFB13C15E71603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE