General

  • Target
    2026-07-05_3f947e20696ea92907884ad117acd1e8_amadey_elex_smoke-loader_stealc_stop
  • Size 172KB
  • Sample260705-fyfpvsdw4l
  • SHA256 d76b3ea63730fce21f57215dba4e5b8e6b8025096e08a81371e839511825f65a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-07-05_3f947e20696ea92907884ad117acd1e8_amadey_elex_smoke-loader_stealc_stop
    .exe 172KB

2026-07-05_3f947e20696ea92907884ad117acd1e8_amadey_elex_smoke-loader_stealc_stop

  • IMPHASH 35d123bc708c121f1090e5520b3d86dc
  • SHA256 d76b3ea63730fce21f57215dba4e5b8e6b8025096e08a81371e839511825f65a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables packed with VMProtect.

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
67056
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths