General
- Target 2026-11-03_c4eedbd940ef6368947a21796d3587cc_amadey_elex_smoke-loader_stop
- Size 803KB
- Sample261104-ken94sbs3l
- SHA256 10eed2c64f04f8f9981285fc066aafa909b298e03e744a811e48aabf79c23ae2
- MD5 c4eedbd940ef6368947a21796d3587cc
- SHA1 1c57e692940eadad75a5ab3e4243e64a24157e2a
- SHA512 45567fedf3cd4753b19ddd59686bc74d50e46af386c979e350255fa87c79371fdb5aa3bf0cffe600066c2008c022d816ecd859c7298e74a86f97793140ae04b2
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkioF:dnPfQpzNgqAkI09HLE
- TLSH T1D905C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_c4eedbd940ef6368947a21796d3587cc_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-03_c4eedbd940ef6368947a21796d3587cc_amadey_elex_smoke-loader_stop
- Size 803KB
- SHA256 10eed2c64f04f8f9981285fc066aafa909b298e03e744a811e48aabf79c23ae2
- MD5 c4eedbd940ef6368947a21796d3587cc
- SHA1 1c57e692940eadad75a5ab3e4243e64a24157e2a
- SHA512 45567fedf3cd4753b19ddd59686bc74d50e46af386c979e350255fa87c79371fdb5aa3bf0cffe600066c2008c022d816ecd859c7298e74a86f97793140ae04b2
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkioF:dnPfQpzNgqAkI09HLE
- TLSH T1D905C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE