General
- Target 2026-11-03_b10535727e8008fb89415dda036b551f_amadey_elex_smoke-loader_stealc_tofsee
- Size 416KB
- Sample261104-mmhhmshs8s
- SHA256 3acdf14da8d5fce5b7141502c5d1f126e1f59acb840a9e600d1bf6a9406d5b23
- MD5 b10535727e8008fb89415dda036b551f
- SHA1 ec2aa44da1c98619a6a7d8243e8308135bb1a4f7
- SHA512 8994ab6d79e0c4619ea1b5ce716a1bb1aecf3d6f1aefea35892a48957e5bfa6423bace10eb019e52ac32af50d82811f8e0e29f36d8782a136494a284ad8ab8f2
- SSDEEP 6144:SclgVrkccVxjfYNftqZe9+Hc0RLG0aOBAf70GbjUwMD9n/lR7e+XpMSH:BeVoDVxjQ1gXHcuLHBS/MD9tR711
- TLSH T1AD94BF217240C039F7A6073189B2E6F559686D3567A4A48FF3687D7A2E312C39A3335F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_b10535727e8008fb89415dda036b551f_amadey_elex_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 2026-11-03_b10535727e8008fb89415dda036b551f_amadey_elex_smoke-loader_stealc_tofsee
- Size 416KB
- SHA256 3acdf14da8d5fce5b7141502c5d1f126e1f59acb840a9e600d1bf6a9406d5b23
- MD5 b10535727e8008fb89415dda036b551f
- SHA1 ec2aa44da1c98619a6a7d8243e8308135bb1a4f7
- SHA512 8994ab6d79e0c4619ea1b5ce716a1bb1aecf3d6f1aefea35892a48957e5bfa6423bace10eb019e52ac32af50d82811f8e0e29f36d8782a136494a284ad8ab8f2
- SSDEEP 6144:SclgVrkccVxjfYNftqZe9+Hc0RLG0aOBAf70GbjUwMD9n/lR7e+XpMSH:BeVoDVxjQ1gXHcuLHBS/MD9tR711
- TLSH T1AD94BF217240C039F7A6073189B2E6F559686D3567A4A48FF3687D7A2E312C39A3335F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE