General
- Target 2026-11-10_cb068c20628df41a0fa225065d216b77_amadey_elex_smoke-loader_stop
- Size 494KB
- Sample261111-yre4vsbg99
- SHA256 9a5d857cfdfeecb89e7c02f426786cb18e64fcbeec6b5bea724a3f2bfdeedf51
- MD5 cb068c20628df41a0fa225065d216b77
- SHA1 64bd6aea2816e8518f552f7e3f888f99e4fc2e0e
- SHA512 2ea671a93b1a6deba815571428069ad1bcd8445becf42f81c6f9469f8c8ddc653a2c6878ce1ba84e0125259d9d6e8cc75f1dab7bec58df525b0aa2bce37cc419
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkJ:BOlx4kk9HKda4YBQi4kVdcQzj9
- TLSH T165B4BF213780C035E3A613328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-10_cb068c20628df41a0fa225065d216b77_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-10_cb068c20628df41a0fa225065d216b77_amadey_elex_smoke-loader_stop
- Size 494KB
- SHA256 9a5d857cfdfeecb89e7c02f426786cb18e64fcbeec6b5bea724a3f2bfdeedf51
- MD5 cb068c20628df41a0fa225065d216b77
- SHA1 64bd6aea2816e8518f552f7e3f888f99e4fc2e0e
- SHA512 2ea671a93b1a6deba815571428069ad1bcd8445becf42f81c6f9469f8c8ddc653a2c6878ce1ba84e0125259d9d6e8cc75f1dab7bec58df525b0aa2bce37cc419
- SSDEEP 6144:rajY1oC+/U8Vjlx4kk9HKda4L38u1/MbQFsrF1W/h84IrV7mMpH8zQW4jYptkJ:BOlx4kk9HKda4YBQi4kVdcQzj9
- TLSH T165B4BF213780C035E3A613328996E1B56A657D3456A4D68FF7A83E795F302C39A3734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE