General
- Target 2026-11-09_a5daa744a72c712d85b6b46a357a342a_amadey_elex_smoke-loader_stop
- Size 803KB
- Sample261110-n2sgtsfa87
- SHA256 07d6fde0f7460e153051e12be439a789d014c91a06c58a2a71009366f3e00b0f
- MD5 a5daa744a72c712d85b6b46a357a342a
- SHA1 3edd539e21c5af39f88082502f5f7846e4f1e95e
- SHA512 592eff1b20271f6692f649f98b51cf52d27f847331caa9f7bfe2ac6dfdb0f2dd218094ccc7da8672bfcc17ec75d73bed2bdf20441e7a2752987d278c1cf4c0a5
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkioy:dnPfQpzNgqAkI09HL/
- TLSH T1AC05C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_a5daa744a72c712d85b6b46a357a342a_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-09_a5daa744a72c712d85b6b46a357a342a_amadey_elex_smoke-loader_stop
- Size 803KB
- SHA256 07d6fde0f7460e153051e12be439a789d014c91a06c58a2a71009366f3e00b0f
- MD5 a5daa744a72c712d85b6b46a357a342a
- SHA1 3edd539e21c5af39f88082502f5f7846e4f1e95e
- SHA512 592eff1b20271f6692f649f98b51cf52d27f847331caa9f7bfe2ac6dfdb0f2dd218094ccc7da8672bfcc17ec75d73bed2bdf20441e7a2752987d278c1cf4c0a5
- SSDEEP 12288:dccNvdRExZGe+Q1nzPlgqmoWkI09HPZkioy:dnPfQpzNgqAkI09HL/
- TLSH T1AC05C0243B90C072E3662B754896F7B517BA7C345A64968FF2A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE