2026-05-30_4da01d15267651971a583039dc7c9126_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop

General

Target
2026-05-30_4da01d15267651971a583039dc7c9126_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop
Size 2.3MB
Sample260530-red8gaes9t
SHA256 b74ad96627a23a353823d06ad0be7e32e96bcf8e83978113515e338a85138d96
MD5 4da01d15267651971a583039dc7c9126
SHA1 7a1280ea807cbca7c015b57e16d80eebc6f10e26
SHA512 91e3d28604b58d71466919e669abcfc59f064b5856c657bf2896e822d7972ec863b484b8299c86d495bcdde0f904eace064a06b00bb35675acac150fb37888d5
SSDEEP 49152:8H676x4DHteqJtb2II24CKUZS+Vlnupeapeeg:8H676xKera1vB
TLSH
T12FB5A003AE5C4235D06FBD758D92D7D9A6213C408B227D8B1EC47E9DFAB26C1B62D231
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-30_4da01d15267651971a583039dc7c9126_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop

File Explorer

2026-05-30_4da01d15267651971a583039dc7c9126_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop

.exe 2.3MB

2026-05-30_4da01d15267651971a583039dc7c9126_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop

IMPHASH 29f658e321d3823f0a9ce796dfebf315
SHA256 b74ad96627a23a353823d06ad0be7e32e96bcf8e83978113515e338a85138d96
MD5 4da01d15267651971a583039dc7c9126
SHA1 7a1280ea807cbca7c015b57e16d80eebc6f10e26
SHA512 91e3d28604b58d71466919e669abcfc59f064b5856c657bf2896e822d7972ec863b484b8299c86d495bcdde0f904eace064a06b00bb35675acac150fb37888d5
SSDEEP 49152:8H676x4DHteqJtb2II24CKUZS+Vlnupeapeeg:8H676xKera1vB
TLSH
T12FB5A003AE5C4235D06FBD758D92D7D9A6213C408B227D8B1EC47E9DFAB26C1B62D231
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

57284

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\ipc\app\plugin-container.pdb

kernel32

LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WaitForSingleObject Sleep RaiseException IsDebuggerPresent GetCurrentThreadId CloseHandle TlsGetValue TlsSetValue TlsAlloc TlsFree QueryPerformanceCounter GetSystemTimeAsFileTime GetNativeSystemInfo GetVersionExW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetHandleInformation VirtualFree GetProcessHandleCount GetCurrentProcessId FreeLibrary HeapSetInformation GetCurrentDirectoryW TerminateProcess GetFileType SignalObjectAndWait CreateFileW FlushFileBuffers WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW SetLastError GetModuleHandleExW GetVolumeInformationW LocalFree GetLastError GetSystemDirectoryW GetComputerNameW ExpandEnvironmentStringsW LoadLibraryExA GetModuleHandleA VirtualAllocEx VirtualProtectEx GetProcAddress VerifyVersionInfoW FlushInstructionCache GetModuleHandleW SetEnvironmentVariableW GetCurrentProcess VerSetConditionMask SetDllDirectoryW GetEnvironmentVariableW ReleaseActCtx MultiByteToWideChar CreateActCtxW VirtualQuery GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent HeapFree HeapAlloc LoadLibraryExW ExitProcess WideCharToMultiByte GetProcessHeap GetStdHandle GetStartupInfoW WriteFile GetEnvironmentStringsW FreeEnvironmentStringsW HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW RtlUnwind OutputDebugStringW HeapReAlloc

winmm

timeGetTime

advapi32

RegCloseKey RegOpenKeyExW RevertToSelf RegDisablePredefinedCache GetLengthSid OpenProcessToken ConvertStringSidToSidW SetTokenInformation ConvertSidToStringSidW LookupAccountNameW

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-30_4da01d15267651971a583039dc7c9126_amadey_elex_emotet_maze_rhadamanthys_smoke-loader_stop

kernel32

winmm

advapi32

generic