General
- Target 2026-11-10_1c6cbb703e2196ee23f60b79f274863f_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample261110-lcl8ea1xcs
- SHA256 3f81f9cf029498de03af5f0f16db521bd304e4ea452b7ec4376723f8494df002
- MD5 1c6cbb703e2196ee23f60b79f274863f
- SHA1 93465c0ef6408779ef81d8ef2be4f7f9a57bb4a6
- SHA512 9f2796d3b962bbb2a4bc62bc506123aa284280a1490bcfb208fcd55f0b4c36aa133800f9b593d299470a8d18e7a24b4448799c7f277ae8e03e29e9ff244027e5
- SSDEEP 49152:SYp95kv1CSPmYHz6vhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivRPZT6vkcD+v49pN/3
- TLSH T171D522ED51E15219BC42211A2AD7FAE008F5EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-10_1c6cbb703e2196ee23f60b79f274863f_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-10_1c6cbb703e2196ee23f60b79f274863f_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_1c6cbb703e2196ee23f60b79f274863f_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 3f81f9cf029498de03af5f0f16db521bd304e4ea452b7ec4376723f8494df002
- MD5 1c6cbb703e2196ee23f60b79f274863f
- SHA1 93465c0ef6408779ef81d8ef2be4f7f9a57bb4a6
- SHA512 9f2796d3b962bbb2a4bc62bc506123aa284280a1490bcfb208fcd55f0b4c36aa133800f9b593d299470a8d18e7a24b4448799c7f277ae8e03e29e9ff244027e5
- SSDEEP 49152:SYp95kv1CSPmYHz6vhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivRPZT6vkcD+v49pN/3
- TLSH T171D522ED51E15219BC42211A2AD7FAE008F5EB563BBE38E3DFC32594953B09ADE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1