General
- Target 2026-11-01_aa99c4d5697f4a40ded63ec7881b5f37_amadey_elex_pay2key_smoke-loader_stop
- Size 2.4MB
- Sample261102-pca2xseh87
- SHA256 544479eca16a3eb3545197fe19d21716e8311600435f069ea2ca98b837ae1f60
- MD5 aa99c4d5697f4a40ded63ec7881b5f37
- SHA1 15e0a1e9354b8e041ff5c94f31abd891b4878183
- SHA512 ef40654fd1938333aa3c837661fb0e328ac002353c8c175d12f2da3a4129a15f3f4a72e548f735132363d7e0aaba8e100806056ef84fc683381b14b515aa7a54
- SSDEEP 49152:mN1dq7nyemrpYatfVu6pzbS/z74mMyEG/C4rSXhrGxubdNNVdb9IPK:mNDqjMuYrGINT1G
- TLSH T11BC5BE42A7C244B2FD866636512F77135739AB0D4317EACF96A03C70AC712F31A7E296
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_aa99c4d5697f4a40ded63ec7881b5f37_amadey_elex_pay2key_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_aa99c4d5697f4a40ded63ec7881b5f37_amadey_elex_pay2key_smoke-loader_stop
- Size 2.4MB
- SHA256 544479eca16a3eb3545197fe19d21716e8311600435f069ea2ca98b837ae1f60
- MD5 aa99c4d5697f4a40ded63ec7881b5f37
- SHA1 15e0a1e9354b8e041ff5c94f31abd891b4878183
- SHA512 ef40654fd1938333aa3c837661fb0e328ac002353c8c175d12f2da3a4129a15f3f4a72e548f735132363d7e0aaba8e100806056ef84fc683381b14b515aa7a54
- SSDEEP 49152:mN1dq7nyemrpYatfVu6pzbS/z74mMyEG/C4rSXhrGxubdNNVdb9IPK:mNDqjMuYrGINT1G
- TLSH T11BC5BE42A7C244B2FD866636512F77135739AB0D4317EACF96A03C70AC712F31A7E296
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1