General
- Target 2026-11-01_d4c27a569a125bfc090f438ef79c0852_amadey_elex_smoke-loader
- Size 3.1MB
- Sample261102-jdnfra1xhs
- SHA256 87a52463fd8338655fa01be190568f7578050bc9dc22603ebe4d0ddcb2688cf5
- MD5 d4c27a569a125bfc090f438ef79c0852
- SHA1 9de45a252305d3e093d158d527e71bf2ee737184
- SHA512 a7639dc559eaf7ed1ab50c3ca4301cb083d9e5d6c885b7967e1a5b4bdb0b69ad988008651b5b69aa852a0600bc045a098e5e3eff93d36eb9465787f54455f4a7
- SSDEEP 49152:ck7cmFdogWOq/K0SkPNknJEyKDZ+031thsvEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+wVkMxo+037a8Q2xjdtFSjYp
- TLSH T1EDE523549658C3F2C08034F56906D7EB6E343E391623EEC737DA3BA8AD201C7963656B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_d4c27a569a125bfc090f438ef79c0852_amadey_elex_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_d4c27a569a125bfc090f438ef79c0852_amadey_elex_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_d4c27a569a125bfc090f438ef79c0852_amadey_elex_smoke-loader
- Size 3.1MB
- SHA256 87a52463fd8338655fa01be190568f7578050bc9dc22603ebe4d0ddcb2688cf5
- MD5 d4c27a569a125bfc090f438ef79c0852
- SHA1 9de45a252305d3e093d158d527e71bf2ee737184
- SHA512 a7639dc559eaf7ed1ab50c3ca4301cb083d9e5d6c885b7967e1a5b4bdb0b69ad988008651b5b69aa852a0600bc045a098e5e3eff93d36eb9465787f54455f4a7
- SSDEEP 49152:ck7cmFdogWOq/K0SkPNknJEyKDZ+031thsvEQf/mh96qjdtEkr9Sj6D6e:ck7cmd+wVkMxo+037a8Q2xjdtFSjYp
- TLSH T1EDE523549658C3F2C08034F56906D7EB6E343E391623EEC737DA3BA8AD201C7963656B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE