General
- Target 2026-11-05_a044d3d554c5f1578ab9dcd2890658c5_amadey_elex_smoke-loader_stop
- Size 803KB
- Sample261106-rtgxxaca97
- SHA256 449dfb0902a91feff14ff7d3effcbfc306ee2167d5498e411ded20fb6d01c891
- MD5 a044d3d554c5f1578ab9dcd2890658c5
- SHA1 7c400d853fb1d6ef16dffae6fd0fd2533bef8d5f
- SHA512 9e031742e5af17fe42bc7aec0d45cddb7dcea9fa2e53c41abdf27c647f576e0c57df584f0be5513f6aa6c368a185e1eb907a240e00fd90843d5f906611eb015f
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkioN:dnPfQpzNgqAkI09HL4
- TLSH T1BF05C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-05_a044d3d554c5f1578ab9dcd2890658c5_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-05_a044d3d554c5f1578ab9dcd2890658c5_amadey_elex_smoke-loader_stop
- Size 803KB
- SHA256 449dfb0902a91feff14ff7d3effcbfc306ee2167d5498e411ded20fb6d01c891
- MD5 a044d3d554c5f1578ab9dcd2890658c5
- SHA1 7c400d853fb1d6ef16dffae6fd0fd2533bef8d5f
- SHA512 9e031742e5af17fe42bc7aec0d45cddb7dcea9fa2e53c41abdf27c647f576e0c57df584f0be5513f6aa6c368a185e1eb907a240e00fd90843d5f906611eb015f
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkioN:dnPfQpzNgqAkI09HL4
- TLSH T1BF05C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE