General
- Target 2026-11-09_4bb430686853086e4cf0971eabc0582b_amadey_elex_smoke-loader_stealc_stop
- Size 508KB
- Sample261110-y456tab15j
- SHA256 82156b0287adcb25a8a61c5f7472aacfab6b959e7141da711d39bb229be3bd2a
- MD5 4bb430686853086e4cf0971eabc0582b
- SHA1 68181d42b31d4de2bf5673604e25377dd815008b
- SHA512 404c0a67a9be7ea6095edc98b422d4bfb4d5d9e4ddee37695840a8bb59fdd1b6919e8def0bc107974ead1bbeb2ec2c896016620c1107980d8f700f70d366db42
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFz:j/D0caF8wvhb43pDbz
- TLSH T1D4B4BE113650C436E32A177148C6FAF46AA9BC3549A5E64FFA787F395E301934A3B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_4bb430686853086e4cf0971eabc0582b_amadey_elex_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.30.235
-
218.54.31.165
Targets
-
- Target 2026-11-09_4bb430686853086e4cf0971eabc0582b_amadey_elex_smoke-loader_stealc_stop
- Size 508KB
- SHA256 82156b0287adcb25a8a61c5f7472aacfab6b959e7141da711d39bb229be3bd2a
- MD5 4bb430686853086e4cf0971eabc0582b
- SHA1 68181d42b31d4de2bf5673604e25377dd815008b
- SHA512 404c0a67a9be7ea6095edc98b422d4bfb4d5d9e4ddee37695840a8bb59fdd1b6919e8def0bc107974ead1bbeb2ec2c896016620c1107980d8f700f70d366db42
- SSDEEP 12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFz:j/D0caF8wvhb43pDbz
- TLSH T1D4B4BE113650C436E32A177148C6FAF46AA9BC3549A5E64FFA787F395E301934A3B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE