General
- Target 2026-11-07_62e1b017f516da729deadc6c057fb697_amadey_elex_smoke-loader_stop
- Size 782KB
- Sample261108-rhvdvsdv2k
- SHA256 b295f3c421c0ad77256d0aec233463d98d507a94197260c42bb3c615b72217d9
- MD5 62e1b017f516da729deadc6c057fb697
- SHA1 f049b73412fe1c615a0d6eae803e0eea8d05c6d9
- SHA512 70bef78460e2483d9d48869468eb0ff58cb10c58fb22f13540bcdd7d8b98b0fd9cd4c1b2e4cb0fad29c3396efbd000e125f184d54bbb9361890137af1fdbc6bc
- SSDEEP 12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c180:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8J0
- TLSH T14505F12173909035F3B613354956E2B45AA97E3456A4D68FF2E83E799E302C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_62e1b017f516da729deadc6c057fb697_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-07_62e1b017f516da729deadc6c057fb697_amadey_elex_smoke-loader_stop
- Size 782KB
- SHA256 b295f3c421c0ad77256d0aec233463d98d507a94197260c42bb3c615b72217d9
- MD5 62e1b017f516da729deadc6c057fb697
- SHA1 f049b73412fe1c615a0d6eae803e0eea8d05c6d9
- SHA512 70bef78460e2483d9d48869468eb0ff58cb10c58fb22f13540bcdd7d8b98b0fd9cd4c1b2e4cb0fad29c3396efbd000e125f184d54bbb9361890137af1fdbc6bc
- SSDEEP 12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c180:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8J0
- TLSH T14505F12173909035F3B613354956E2B45AA97E3456A4D68FF2E83E799E302C39A3334F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE