General
- Target 2026-11-01_e0f549662dbf7a500a464ba70e55a4b7_amadey_elex_smoke-loader_stop
- Size 493KB
- Sample261102-gnce5ae19v
- SHA256 41c23220e4007b3d409ea49ce1e8a815f7ce01fc38608dcdfb1524443cc2c65c
- MD5 e0f549662dbf7a500a464ba70e55a4b7
- SHA1 293f5ab672514fe07818ec37a280d1ae43b12f08
- SHA512 085f4a654eb1ebc5a62e7d06e7139b81a47058710271c62ffd39801f00f92531ab7e7af08eb0c15f9785c2a1fb1d2279783f38994c6308f84b9578651dfa05ad
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkk:BOlx4kk9HKda4YBQi4kVdcQzjQ
- TLSH T1CCB4BF213780C035E3A613328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_e0f549662dbf7a500a464ba70e55a4b7_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_e0f549662dbf7a500a464ba70e55a4b7_amadey_elex_smoke-loader_stop
- Size 493KB
- SHA256 41c23220e4007b3d409ea49ce1e8a815f7ce01fc38608dcdfb1524443cc2c65c
- MD5 e0f549662dbf7a500a464ba70e55a4b7
- SHA1 293f5ab672514fe07818ec37a280d1ae43b12f08
- SHA512 085f4a654eb1ebc5a62e7d06e7139b81a47058710271c62ffd39801f00f92531ab7e7af08eb0c15f9785c2a1fb1d2279783f38994c6308f84b9578651dfa05ad
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkk:BOlx4kk9HKda4YBQi4kVdcQzjQ
- TLSH T1CCB4BF213780C035E3A613328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE