Overview
overview
7Static
static
32026-07-20...er.exe
windows10-2004-x64
72026-07-20...er.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ID.dll
windows10-2004-x64
3$PLUGINSDI...ID.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...le.dll
windows10-2004-x64
3$PLUGINSDI...le.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nk.dll
windows10-2004-x64
3$PLUGINSDI...nk.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...lW.dll
windows10-2004-x64
3$PLUGINSDI...lW.dll
windows11-ltsc_2024-x64
3General
- Target 2026-07-20_b46ae4353166c4e7fad9662bfd26f4b6_amadey_elex_hijackloader_jeefo_smoke-loader
- Size 1.4MB
- Sample260720-c52zwscy7k
- SHA256 9ec8d351010c2dc1dbda7035f15e87584b8e0d50e89a09345c991c3a41267f5b
- MD5 b46ae4353166c4e7fad9662bfd26f4b6
- SHA1 21500ee10c368a9488dfd9b5665cc61c271c7971
- SHA512 e1e21773930b30298a01adb27396bdd04fbd2ec2bb2327e6c1e76086d885bdfd4826cccc8d312aabac62cb21d4eb2b687072e2e8cdc065ae5348b65cd5d228f8
- SSDEEP 12288:GaiUjD5L29euP+bnEPsSjQUJDJth95+B7a2So3EPItkYohU8GaPxT:GaxKhmbEPsSjr0BW1o0PMkJW8GaP5
- TLSH T128656B52B790B872D45E9930F8F4D72E2739FD866F92864B3314B29C1EB1390997824F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-20_b46ae4353166c4e7fad9662bfd26f4b6_amadey_elex_hijackloader_jeefo_smoke-loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-07-20_b46ae4353166c4e7fad9662bfd26f4b6_amadey_elex_hijackloader_jeefo_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Banner.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Banner.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/BitsUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/BitsUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/CityHash.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/CityHash.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ExecInExplorer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ExecInExplorer.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/HttpPostFile.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/HttpPostFile.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/ShellLink.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/ShellLink.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/liteFirewallW.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/liteFirewallW.dll
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target 2026-07-20_b46ae4353166c4e7fad9662bfd26f4b6_amadey_elex_hijackloader_jeefo_smoke-loader
- Size 1.4MB
- SHA256 9ec8d351010c2dc1dbda7035f15e87584b8e0d50e89a09345c991c3a41267f5b
- MD5 b46ae4353166c4e7fad9662bfd26f4b6
- SHA1 21500ee10c368a9488dfd9b5665cc61c271c7971
- SHA512 e1e21773930b30298a01adb27396bdd04fbd2ec2bb2327e6c1e76086d885bdfd4826cccc8d312aabac62cb21d4eb2b687072e2e8cdc065ae5348b65cd5d228f8
- SSDEEP 12288:GaiUjD5L29euP+bnEPsSjQUJDJth95+B7a2So3EPItkYohU8GaPxT:GaxKhmbEPsSjr0BW1o0PMkJW8GaP5
- TLSH T128656B52B790B872D45E9930F8F4D72E2739FD866F92864B3314B29C1EB1390997824F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/ApplicationID.dll
- Size 55KB
- SHA256 a9dad9fdaae93d10dc2ee346b231913445e731049554b8bb1506827e46f8a44e
- MD5 fdc0338e6faeaf6f7c271982e103473b
- SHA1 9a41f7932abe8be7e32c6371f085cf14de355d00
- SHA512 a766eef11db4c94b1445d1cd70cf1d3b6141d6b3973562e9fa8d81c79195886b884dbc9b9f6952f8a6e8619534a6bf2d615d539d2cace9c8843dc19415051cc0
- SSDEEP 768:oY+N1V9Ek9B/3I2IIk85ZLa342QpIK0+KE1zRBoSLDGFo+EAM:oY+LpI2IIk85Fs+LNRBo1oyM
- TLSH T167438C10BA80D473C556983970E8DA225E7E7D122BF090D37FBA83694F617D0B67E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/Banner.dll
- Size 14KB
- SHA256 413f9423d3162426bc2b61862f7de799ca56c9609422e27345342692039932d6
- MD5 c542a71f55b74176158b04df506cd278
- SHA1 3a96215c86cac3e23c9eb4e310ce193ea748c321
- SHA512 b33769366cc91c824aee23898b0204956096b191f350eaf259a14951a7fbab7b2abf846f67ce12f49734581582329277b057af9bfb79a410b0a054e9d6bd1458
- SSDEEP 192:bAfhCpBEyMW7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRE/VX0ijnnnnnGi2D:YCJMUvDGFtart8E9VFK4iayi2D
- TLSH T1FC624AB5C2506C72EC2B4D7630C88A172E76BB456BD480F3576BC09097817C367FD6AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/BitsUtils.dll
- Size 15KB
- SHA256 ab77c0a6c79e76ab0f509d655273b2ee5c682c702217f4f884bbab3d2fdfc4c0
- MD5 8dd17c172a24ebf9601308b949a9ea22
- SHA1 507e586c9f69ddc7e58442631efc44f3fe58089c
- SHA512 7de5a35771ac8ead2e3096de29bdedd8e94696d35dc304388c1cff2a14bb264e389a576dae21aaf9cbac79de6c99606b61f1dc5f0ba35fd261b2f5553d389e59
- SSDEEP 192:3VaJs7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRPmq514Lvsoj:3VaJWvDGFtart8E9VFK4iFm810Hj
- TLSH T1B3623CB787905C66ED7B8D7530E4C9267A3577475BA084F3126EC1009BC07C27AFD19A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/CityHash.dll
- Size 53KB
- SHA256 c299a0a71bf57eb241868158b4fcfe839d15d5ba607e1bdc5499fdf67b334a14
- MD5 2021acc65fa998daa98131e20c4605be
- SHA1 2e8407cfe3b1a9d839ea391cfc423e8df8d8a390
- SHA512 cb96d3547bab778cbe94076be6765ed2ae07e183e4888d6c380f240b8c6708662a3b2b6b2294e38c48bc91bf2cc5fc7cfcd3afe63775151ba2fe34b06ce38948
- SSDEEP 768:jfXngOuwVTROMOZbPg9ao/wxsfJM3JuNUgo3BDGFo+EA3:j/hPVTRBO9NJYMMnomoy3
- TLSH T1C8439D31759189B3D59AC97230E49F2F7E7E7A011BE488D35B7984001F60BE1B27E35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/ExecInExplorer.dll
- Size 14KB
- SHA256 9bab9b0fa6beec8ab821ab3b43563dc68d31bfd406dba4a887b62452880d68bc
- MD5 9824b43f8ffb1da7ade75999c183a7ee
- SHA1 0bb579b50860655a19d47a409ae43cdacf077652
- SHA512 7a827b2e1c0bd6c6b9138b72da378d05db9760f82865bf71bb937ae908772ddb470b5f273f8128e7b07ef8d3197d4c5965ca1ddef0e6fe6207618fdc37491619
- SSDEEP 384:4z4SBlhVUOjjBur1ENvFjlrmAt/TYVQi6lo:9WBhur1ENNjl9TZFlo
- TLSH T1B062D02D56DCAD0DF6826BCC3166CC01F0680EE0573FBD19E52BEAC7BEA0D5851949AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $PLUGINSDIR/HttpPostFile.dll
- Size 14KB
- SHA256 55e714d2e298c42f73c5872ca50275d2d6b4b161c76cb87a8ebca8c1f99858db
- MD5 b97c09fdb76e1f5f5b964c229f0e9cc0
- SHA1 808e64bea4fde6d4944b6ffe5a3acbc6f45f9be7
- SHA512 1e930930bceb5895c599bdc5a886012ebaa3e08da03dcbf0579acf6d22bd061d36202c8f05d3d49c3b823543162f9ece74f9beefc9cc4085a67415e46bd84727
- SSDEEP 192:deoj8f2F7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRIb3i7Q:dU2nvDGFtart8E9VFK4iGbik
- TLSH T188623BF7C7905C50EC6A8D3530E89A2A7A7177426B91C4F7631EC1104BC1B81BAFC2AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/InstallOptions.dll
- Size 25KB
- SHA256 c34f095e200db420ce9af5489c3e392be285e43c3f4c9fbe34686b1f0a1531ad
- MD5 fd249bc508706f04a18e0bc0afddec82
- SHA1 b94efda9f41c89fc6120ed385867125d03f28bea
- SHA512 c820c06ad5ae21101602d9e7864fed9b470b25fa9a0ee025d05e72697d88c7e03cbee7ad476f4e3d5b6e467248b8ad1fefa2710c76011e2156b85068961404ba
- SSDEEP 384:EAC43tPegZ3eBaRwCPOYY7nNYXCA/YosaNvDGFtart8E9VFK4ivDGb:EdTgZ3eBTCmrnNAEYDGFo+EAy
- TLSH T19BC28DA2A7C06CB3E9A35E3575E0AA179FB1F7126881CD93C33789005A417827EBC395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/ShellLink.dll
- Size 14KB
- SHA256 5f6f414b412c72b10f49eb92af1d368ede531b58fb200d539fd2b45e371612db
- MD5 fa94d120efb029b43217c66bbc8c650c
- SHA1 1fcf2d76adf69b403b7400681ac91d50ed20385f
- SHA512 07ed0771d5bbb651ea7421a5f6b08fa234f9cc041315d9360a7135ba12180064fc99a27725385a8ecd3ceb25bed5c00de169f7dabb3ccf6e987f45254dff8158
- SSDEEP 192:46J7JQCdiaR+7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRqt8kzN0eM2s:LJ7JQG2vDGFtart8E9VFK4ictvU2s
- TLSH T177623A6AC7A1EC90DC2BCD3730D4B9376A71AB8156A184EB576CC54047827873EFC0AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 22KB
- SHA256 b711c4f17690421c9dc8ddb9ed5a9ddc539b3a28f11e19c851e25dcfc7701c04
- MD5 b361682fa5e6a1906e754cfa08aa8d90
- SHA1 c6701aee0c866565de1b7c1f81fd88da56b395d3
- SHA512 2778f91c9bcf83277d26c71118a1ccb0fb3ce50e89729f14f4915bc65dd48503a77b1e5118ce774dea72f5ce3cc8681eb9ca3c55cf90e9f61a177101ba192ae9
- SSDEEP 384:78+Qlt70Fj/lQRY/9VjjgLZvDGFtart8E9VFK4ietffvtlh:7SqFjm6YL1DGFo+EA6tlh
- TLSH T153A27C62C7605CF1FD629D3430E4AE2B6F79BB496B9084E397AAC0405B817C365FD287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 28KB
- SHA256 ec6a56d981892bf251df1439bea425a5f6c7e1c7312d44bedd5e2957f270338c
- MD5 d23b256e9c12fe37d984bae5017c5f8c
- SHA1 fd698b58a563816b2260bbc50d7f864b33523121
- SHA512 13f284821324ffaeadafd3651f64d896186f47cf9a68735642cf37b37de777dba197067fbccd3a7411b5dc7976e510439253bd24c9be1d36c0a59d924c17ae8e
- SSDEEP 384:2lqVibvTh4qnFP+OPEzinclP++vDGFtart8E9VFK4iBSaXrwz1k:EqVavVfPkzhlmIDGFo+EAzrn
- TLSH T13CD28EA657D0467BE9731D3131E56A125F7AB9311E7184BF0A37C6842AA0B83BD7C30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/liteFirewallW.dll
- Size 92KB
- SHA256 c0a12e651085aa2488796b474a5ca3bc70c22f1fd98ef854049b8d72987e478d
- MD5 f5a3005a46e051b8d9eb5e2be7802f7e
- SHA1 4fae43843bf6210d5d98683b50705824877a7d9a
- SHA512 4993fcfe6669dd1e3621ca50e35aad750bc6c89838abf94da4303c5a31e958b3d3bc2cf70c268590c8cd5cdbc90f015ffa37cf98548c2b54ea8171b63a3bfa0c
- SSDEEP 1536:tNiXc1jND/x0LI7W2kG3Crh520Hsy7xxz4J:79N7iPrh52ssyXe
- TLSH T1BE939E21B6E0C472C88BA9395464D7B25BBFB5316AE089877B68077D5F303C0977938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10