General
- Target 2026-11-01_841b779995634ff686b5202d1c3b1a7b_amadey_elex_smoke-loader_stop
- Size 803KB
- Sample261102-tpkt4sdw2m
- SHA256 cc007ad9d1aaaa195fcf99dd25996bb5029e626919cecd80d632766e0f53cbba
- MD5 841b779995634ff686b5202d1c3b1a7b
- SHA1 b05b5e2913b258a09f88864b4305c76ca69c5e09
- SHA512 15ac4e033dc5e2b8abfd9a5aaf57a3f847e80978edce202463002036be2ee5a91f6bc3f6e8292a940ab9ab47eac8a351bde088d921ed50515834fe2b63a9e620
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkiog:dnPfQpzNgqAkI09HLx
- TLSH T13405C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_841b779995634ff686b5202d1c3b1a7b_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_841b779995634ff686b5202d1c3b1a7b_amadey_elex_smoke-loader_stop
- Size 803KB
- SHA256 cc007ad9d1aaaa195fcf99dd25996bb5029e626919cecd80d632766e0f53cbba
- MD5 841b779995634ff686b5202d1c3b1a7b
- SHA1 b05b5e2913b258a09f88864b4305c76ca69c5e09
- SHA512 15ac4e033dc5e2b8abfd9a5aaf57a3f847e80978edce202463002036be2ee5a91f6bc3f6e8292a940ab9ab47eac8a351bde088d921ed50515834fe2b63a9e620
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkiog:dnPfQpzNgqAkI09HLx
- TLSH T13405C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE