General
- Target 2026-11-11_c562c6318fbd788687f16f8347577c41_amadey_elex_smoke-loader_stop
- Size 584KB
- Sample261112-g28eqaev9y
- SHA256 9bc3d6cc96c6d08856e12e44877362989942bca9ed64c3a5b144fbdd2b7cfaef
- MD5 c562c6318fbd788687f16f8347577c41
- SHA1 954d442b3b923a3a979f198ad602b7d311343f12
- SHA512 5af8ded881bbfa7b7faf39a4cbbed980c0ebe8c78bb886fdcf28344d682b8164ea2409267f44b02a53626e1cb892806cf72862437fcdc08425179c3ba7c34a0a
- SSDEEP 12288:SccNvdRExZGe+Q1nzPqmoWkI09HPZkiMgto:SnPfQpziAkI09HLMgG
- TLSH T191D4C0243B90C072E3662B754896F7B516BA7C345A64968FF3A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-11_c562c6318fbd788687f16f8347577c41_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-11_c562c6318fbd788687f16f8347577c41_amadey_elex_smoke-loader_stop
- Size 584KB
- SHA256 9bc3d6cc96c6d08856e12e44877362989942bca9ed64c3a5b144fbdd2b7cfaef
- MD5 c562c6318fbd788687f16f8347577c41
- SHA1 954d442b3b923a3a979f198ad602b7d311343f12
- SHA512 5af8ded881bbfa7b7faf39a4cbbed980c0ebe8c78bb886fdcf28344d682b8164ea2409267f44b02a53626e1cb892806cf72862437fcdc08425179c3ba7c34a0a
- SSDEEP 12288:SccNvdRExZGe+Q1nzPqmoWkI09HPZkiMgto:SnPfQpziAkI09HLMgG
- TLSH T191D4C0243B90C072E3662B754896F7B516BA7C345A64968FF3A43B399E301934B2734F
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE