General
- Target 2026-11-01_c237b6a52e231d9b7dcea1a89506e380_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample261102-llv7nsef79
- SHA256 c6ea2a7cff584c6f204b6e0ebd9794e1528ea32e36fac229a0b95a655b5452d3
- MD5 c237b6a52e231d9b7dcea1a89506e380
- SHA1 3e99b55c5bda6ec86eb97281a1eebf63e97cdba3
- SHA512 00e170d16bbdc862997b1aed9fbbcb84ec65ea98f9f63eb92463c833474e03baf5332ef6e78a4ae63df6e0c718470b169a2940e7ea9ecd9366faf61bb6e4bbf8
- SSDEEP 49152:SYp95kv1H0vhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivV0vkcD+v49pN/3
- TLSH T12CD522E991E15219BC42211A3AD7FAE014F1EB563BBE38E3DFC32594953B09BDE18305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c237b6a52e231d9b7dcea1a89506e380_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c237b6a52e231d9b7dcea1a89506e380_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c237b6a52e231d9b7dcea1a89506e380_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 c6ea2a7cff584c6f204b6e0ebd9794e1528ea32e36fac229a0b95a655b5452d3
- MD5 c237b6a52e231d9b7dcea1a89506e380
- SHA1 3e99b55c5bda6ec86eb97281a1eebf63e97cdba3
- SHA512 00e170d16bbdc862997b1aed9fbbcb84ec65ea98f9f63eb92463c833474e03baf5332ef6e78a4ae63df6e0c718470b169a2940e7ea9ecd9366faf61bb6e4bbf8
- SSDEEP 49152:SYp95kv1H0vhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivV0vkcD+v49pN/3
- TLSH T12CD522E991E15219BC42211A3AD7FAE014F1EB563BBE38E3DFC32594953B09BDE18305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1