General
- Target 2026-11-02_575867de7f26da706126ed98fee34159_amadey_elex_mafia_smoke-loader
- Size 337KB
- Sample261103-lfsvcshf42
- SHA256 e0800bced324495ed3c36ee36c5515938d85c81d678cf25f30cf43bbc5e6e808
- MD5 575867de7f26da706126ed98fee34159
- SHA1 af6260a4adc3f35ef092e6ec5c39d92b6af8805b
- SHA512 4beba7ed14bd8184e551f0b9b777fbfb65c3d19620838ce56159e2c851b3547775a9052b7513386ec7bb0d0c530ccb1834a3c0c2897f1e339084469d9e62e3b7
- SSDEEP 6144:xafZbOhOg5mBADcXd7MeVABdGCXrV38Z:xCTg5nDO7MeVABdGCXB38
- TLSH T13B748E3076A0C0B1F8D351FA4AECA67901ADB8B147A511C779C90BFEC6297E06B3534B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-02_575867de7f26da706126ed98fee34159_amadey_elex_mafia_smoke-loader.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_575867de7f26da706126ed98fee34159_amadey_elex_mafia_smoke-loader.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/reverse_tcp
C2
-
192.168.8.101:24526
Targets
-
- Target 2026-11-02_575867de7f26da706126ed98fee34159_amadey_elex_mafia_smoke-loader
- Size 337KB
- SHA256 e0800bced324495ed3c36ee36c5515938d85c81d678cf25f30cf43bbc5e6e808
- MD5 575867de7f26da706126ed98fee34159
- SHA1 af6260a4adc3f35ef092e6ec5c39d92b6af8805b
- SHA512 4beba7ed14bd8184e551f0b9b777fbfb65c3d19620838ce56159e2c851b3547775a9052b7513386ec7bb0d0c530ccb1834a3c0c2897f1e339084469d9e62e3b7
- SSDEEP 6144:xafZbOhOg5mBADcXd7MeVABdGCXrV38Z:xCTg5nDO7MeVABdGCXB38
- TLSH T13B748E3076A0C0B1F8D351FA4AECA67901ADB8B147A511C779C90BFEC6297E06B3534B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.