2026-07-11_9a541c95b9efa74c9e4bdf179b6f7b18_amadey_elex_maze_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_9a541c95b9efa74c9e4bdf179b6f7b18_amadey_elex_maze_smoke-loader
Size 6.6MB
Sample260711-s644msfz2v
SHA256 39d94439135f436bab16c6705fe0b232e5a00b41d934bccaa6c7decc27648a78
MD5 9a541c95b9efa74c9e4bdf179b6f7b18
SHA1 047335caa5bf77761dbb85895d78eff760af0495
SHA512 9c0dad03826a8a9767fd129735ab2c9f0a14f083f79c789417805537b29c8ba382293b4235a6f9741b0113ed4e01aeda6975aa20114e5d775a56e81e082c5fb2
SSDEEP 98304:WWPUVSFaWYmQ1TznW6mwnmcPmc2Zw4K6Y8njOjySIdMij7WvICW5CT1F3tilnwhB:WWPalWGLWZDb40CjApj7WgTyFySVZG
TLSH
T156661212B740D126E14701B4751EE3E55068B9344669C883B7C4BB1FBEB0BE6E93AF4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_9a541c95b9efa74c9e4bdf179b6f7b18_amadey_elex_maze_smoke-loader

File Explorer

2026-07-11_9a541c95b9efa74c9e4bdf179b6f7b18_amadey_elex_maze_smoke-loader

.exe 6.6MB

2026-07-11_9a541c95b9efa74c9e4bdf179b6f7b18_amadey_elex_maze_smoke-loader

IMPHASH b57ad1675d8d04d4608fc1a4b4d430b1
SHA256 39d94439135f436bab16c6705fe0b232e5a00b41d934bccaa6c7decc27648a78
MD5 9a541c95b9efa74c9e4bdf179b6f7b18
SHA1 047335caa5bf77761dbb85895d78eff760af0495
SHA512 9c0dad03826a8a9767fd129735ab2c9f0a14f083f79c789417805537b29c8ba382293b4235a6f9741b0113ed4e01aeda6975aa20114e5d775a56e81e082c5fb2
SSDEEP 98304:WWPUVSFaWYmQ1TznW6mwnmcPmc2Zw4K6Y8njOjySIdMij7WvICW5CT1F3tilnwhB:WWPalWGLWZDb40CjApj7WgTyFySVZG
TLSH
T156661212B740D126E14701B4751EE3E55068B9344669C883B7C4BB1FBEB0BE6E93AF4B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

240582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCommState GetProcessTimes TlsSetValue GetLocaleInfoW GetVersionExW LeaveCriticalSection GetExitCodeProcess lstrcpynW IsProcessorFeaturePresent Beep CreateProcessA TerminateProcess FileTimeToSystemTime GetModuleFileNameW GetTimeZoneInformation CreateFileW MultiByteToWideChar SetThreadPriority GlobalUnlock GetPrivateProfileIntW VerifyVersionInfoW GetLastError GetThreadLocale VirtualAlloc CreateNamedPipeA IsValidCodePage EnterCriticalSection GetDiskFreeSpaceW FindClose ResetEvent LoadLibraryA CreateFileMappingA GetFileType LockResource EnumResourceTypesW GetThreadPriority TlsAlloc CloseHandle GetWindowsDirectoryW FileTimeToLocalFileTime GetSystemTimeAsFileTime GetThreadTimes OpenFileMappingA LocalFree EnumSystemLocalesW SuspendThread DeleteFileA ExpandEnvironmentStringsW SwitchToThread SetStdHandle ReadConsoleW ReadFile FlushFileBuffers GetStringTypeW OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP LCMapStringW HeapReAlloc GetCPInfo GetOEMCP GetACP LoadLibraryExW WriteConsoleW GetModuleHandleW TlsFree TlsGetValue Sleep InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW ExpandEnvironmentStringsA GetCurrentThread GetTickCount WaitForSingleObjectEx ConnectNamedPipe SetCommBreak GetLogicalDrives GetUserDefaultLCID HeapFree GetEnvironmentStringsW QueryPerformanceCounter SetEnvironmentVariableW GetCurrentProcess GetCommState SystemTimeToFileTime SetDllDirectoryW SystemTimeToTzSpecificLocalTime FindResourceW VirtualQuery SetEndOfFile GetDriveTypeW RtlCaptureContext UnmapViewOfFile FindFirstFileW GetFileSize CreateFileA GetTempFileNameW GetDateFormatW GetEnvironmentVariableW EncodePointer DeleteFileW GetFullPathNameW GetCurrentProcessId WriteFile GetProcessHeap GetCurrentThreadId SetLastError GetStartupInfoW DeleteCriticalSection GetStdHandle IsDebuggerPresent DecodePointer GetCommandLineW RaiseException RtlUnwind ExitProcess GetModuleHandleExW GetProcAddress WideCharToMultiByte HeapSize HeapAlloc

user32

GetDlgItemInt CharUpperBuffW CharNextW IsIconic LoadStringA DrawTextExW GetMenuItemInfoW EnumWindows GetDC InflateRect DrawStateW CharUpperW SetWindowLongW DestroyCursor SendDlgItemMessageW GetDesktopWindow GetSysColorBrush EnableScrollBar GetMenuItemCount InsertMenuW GetDlgItemTextW SetDlgItemTextW ValidateRgn SendMessageW DestroyMenu SetWindowTextW DestroyIcon SetMenuItemInfoW GetWindow IsRectEmpty DrawFocusRect

gdi32

SetLayout Arc GetTextExtentPoint32W SetWindowExtEx Polygon GetRgnBox PtInRegion CombineRgn RectInRegion ExtCreateRegion StretchDIBits SetStretchBltMode GetNearestPaletteIndex CreatePatternBrush SetROP2 SetWinMetaFileBits CloseEnhMetaFile CreateEnhMetaFileW CreatePolygonRgn

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegOpenKeyExW ChangeServiceConfigW StartServiceW LookupPrivilegeValueW SetSecurityDescriptorDacl OpenServiceW OpenProcessToken AdjustTokenPrivileges

shell32

CommandLineToArgvW Shell_NotifyIconW

oleaut32

SafeArrayGetUBound SafeArrayPtrOfIndex VariantChangeType VariantClear SysReAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_9a541c95b9efa74c9e4bdf179b6f7b18_amadey_elex_maze_smoke-loader

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

generic