General
- Target 2026-11-01_f67c5378b0d9c9a118be040011b33b64_amadey_elex_smoke-loader_stop
- Size 803KB
- Sample261102-c9963azwb1
- SHA256 aea639612cb7b2cff2e8206e8c9d97ebac7ff7e7b29eeaf862ac7922351bb9b9
- MD5 f67c5378b0d9c9a118be040011b33b64
- SHA1 cf42c8fb9f49a886dac16deffca6672a7c666849
- SHA512 3915011d6d8335f246e587efad691e667421d314fbe6246f2aeab46b130e1d31cf3b5ceb7cf9ecc3f4ae8b11c5c4b4874910b4d510bf0951c99a8dffab7cb137
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkio0:dnPfQpzNgqAkI09HLl
- TLSH T16C05C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_f67c5378b0d9c9a118be040011b33b64_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_f67c5378b0d9c9a118be040011b33b64_amadey_elex_smoke-loader_stop
- Size 803KB
- SHA256 aea639612cb7b2cff2e8206e8c9d97ebac7ff7e7b29eeaf862ac7922351bb9b9
- MD5 f67c5378b0d9c9a118be040011b33b64
- SHA1 cf42c8fb9f49a886dac16deffca6672a7c666849
- SHA512 3915011d6d8335f246e587efad691e667421d314fbe6246f2aeab46b130e1d31cf3b5ceb7cf9ecc3f4ae8b11c5c4b4874910b4d510bf0951c99a8dffab7cb137
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkio0:dnPfQpzNgqAkI09HLl
- TLSH T16C05C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE