General
- Target 2026-11-07_6285429efd1891b34fedaf20637e156e_amadey_elex_smoke-loader_stealc_stop
- Size 510KB
- Sample261108-rjfl4adv2m
- SHA256 38aae2a9a1db8325ddec378b0953510e98539e47fa7271a74ab0c02880510148
- MD5 6285429efd1891b34fedaf20637e156e
- SHA1 7370d502af39ebc140062ee30553439c2cea2ad8
- SHA512 a6ab2df644ed06bbc88210615c1252495727d2eb13eb33fcdceb03cabf55bea237626d32c0c39d6d36e5edae95d3a3f8a136020a93a9749dfaa1607c5059c652
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFy:j/D0caF8wvhb43pDby
- TLSH T1D7B4BE113650C436E32A177148C6FBF42AA9BC3549A5E64FFA787F395E301935A2B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_6285429efd1891b34fedaf20637e156e_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-11-07_6285429efd1891b34fedaf20637e156e_amadey_elex_smoke-loader_stealc_stop
- Size 510KB
- SHA256 38aae2a9a1db8325ddec378b0953510e98539e47fa7271a74ab0c02880510148
- MD5 6285429efd1891b34fedaf20637e156e
- SHA1 7370d502af39ebc140062ee30553439c2cea2ad8
- SHA512 a6ab2df644ed06bbc88210615c1252495727d2eb13eb33fcdceb03cabf55bea237626d32c0c39d6d36e5edae95d3a3f8a136020a93a9749dfaa1607c5059c652
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFy:j/D0caF8wvhb43pDby
- TLSH T1D7B4BE113650C436E32A177148C6FBF42AA9BC3549A5E64FFA787F395E301935A2B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE