General
- Target 2026-11-07_06d00dab269a82617379467ebe7bec1d_amadey_elex_smoke-loader_stop
- Size 586KB
- Sample261109-q1ssbax18q
- SHA256 608ea07e22d4db5dd8a254cf623be0e46bf0ac2d16f0812e01e2590968ce75f8
- MD5 06d00dab269a82617379467ebe7bec1d
- SHA1 fa853549e793717e9a51c8032b37bbaee9aac4f6
- SHA512 c113ea5aba3525b5c3d0af4517cd4aec2ac4b58db8b3c1b9b07151a840116a138418354e6f03619410294957aa8d99f5fecc207541a2d273711df4c90353e085
- SSDEEP 12288:SccNvdRExZGe+Q1nzPqmoWkI09HPZkiMgtE:SnPfQpziAkI09HLMga
- TLSH T15CD4C0243790C072E3662B754896F7B51BBA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-07_06d00dab269a82617379467ebe7bec1d_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-07_06d00dab269a82617379467ebe7bec1d_amadey_elex_smoke-loader_stop
- Size 586KB
- SHA256 608ea07e22d4db5dd8a254cf623be0e46bf0ac2d16f0812e01e2590968ce75f8
- MD5 06d00dab269a82617379467ebe7bec1d
- SHA1 fa853549e793717e9a51c8032b37bbaee9aac4f6
- SHA512 c113ea5aba3525b5c3d0af4517cd4aec2ac4b58db8b3c1b9b07151a840116a138418354e6f03619410294957aa8d99f5fecc207541a2d273711df4c90353e085
- SSDEEP 12288:SccNvdRExZGe+Q1nzPqmoWkI09HPZkiMgtE:SnPfQpziAkI09HLMga
- TLSH T15CD4C0243790C072E3662B754896F7B51BBA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE