2026-07-22_bb73d39bd63ace2be3deaec18ed09044_amadey_elex_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-22_bb73d39bd63ace2be3deaec18ed09044_amadey_elex_smoke-loader_stop
Size 49.0MB
Sample260722-xyydcabb89
SHA256 4d113f2a30f907e8c27d9ff29b98b6d19f8fef7f4f9689b24972920b9fd49f3a
MD5 bb73d39bd63ace2be3deaec18ed09044
SHA1 9057a9d36abf01498a2eb1d5884025207913dc70
SHA512 460f3a084342b32120db4d5b10b3f40cee7761ca54d749d40e0c62895256527ab33493d2b1612a12bc68ccfef0209ce33f4174ef6247422020a83c7548efafb9
SSDEEP 786432:vHvdIIEn7cdkk56x3VIvMMOui6eDM3DJpIKM+/EDme8q56Pl3XNOmI+Cn8E9UDvV:vPdCnoKPVEOuTeWvEae6SmI+Cn1yvHR
TLSH
T161B733225781AC37E232AB3540FBDA7027F67C7E1E47449E36612928FE79780191BB4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_bb73d39bd63ace2be3deaec18ed09044_amadey_elex_smoke-loader_stop

File Explorer

2026-07-22_bb73d39bd63ace2be3deaec18ed09044_amadey_elex_smoke-loader_stop

.exe 49.0MB

2026-07-22_bb73d39bd63ace2be3deaec18ed09044_amadey_elex_smoke-loader_stop

IMPHASH 36632610a044b4b8ae589b4226d406da
SHA256 4d113f2a30f907e8c27d9ff29b98b6d19f8fef7f4f9689b24972920b9fd49f3a
MD5 bb73d39bd63ace2be3deaec18ed09044
SHA1 9057a9d36abf01498a2eb1d5884025207913dc70
SHA512 460f3a084342b32120db4d5b10b3f40cee7761ca54d749d40e0c62895256527ab33493d2b1612a12bc68ccfef0209ce33f4174ef6247422020a83c7548efafb9
SSDEEP 786432:vHvdIIEn7cdkk56x3VIvMMOui6eDM3DJpIKM+/EDme8q56Pl3XNOmI+Cn8E9UDvV:vPdCnoKPVEOuTeWvEae6SmI+Cn1yvHR
TLSH
T161B733225781AC37E232AB3540FBDA7027F67C7E1E47449E36612928FE79780191BB4D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

116789

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\CB\11X_MainQ\LocalKit\Tools\Win\Installer\AdobeSelfExtractor\Release\AdobeSelfExtractor.pdb

msi

ord70

kernel32

LocalReAlloc DeleteCriticalSection TlsFree WritePrivateProfileStringW GetCurrentDirectoryW GlobalFlags lstrlenA SetErrorMode GetFileSizeEx GetFileTime GetStartupInfoW HeapFree HeapAlloc GetSystemTimeAsFileTime ExitProcess SetEnvironmentVariableW SetCurrentDirectoryW RtlUnwind RaiseException HeapReAlloc ExitThread SetStdHandle GetFileType HeapSize SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW TlsSetValue GetStartupInfoA HeapCreate QueryPerformanceCounter GetTickCount TerminateProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetCurrentDirectoryA GetDriveTypeA GetConsoleCP GetConsoleMode GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GetModuleHandleA InterlockedDecrement FreeResource GetCurrentProcessId GlobalAddAtomW SuspendThread ResumeThread SetThreadPriority GetFullPathNameW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers LoadLibraryW GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesW GetModuleFileNameW lstrcmpA GetLocaleInfoW LoadLibraryExW CompareStringA InterlockedExchange lstrcmpW FreeLibrary SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock MulDiv GetModuleHandleW GetProcAddress lstrlenW GetVolumeInformationW WideCharToMultiByte CreateThread SetFileTime MoveFileW VirtualAlloc VirtualFree RemoveDirectoryW SetFileAttributesW GetExitCodeProcess CreateProcessW CreateDirectoryW GetPrivateProfileStringW SetEvent Sleep WaitForSingleObject ResetEvent CreateEventW GlobalMemoryStatusEx GetEnvironmentVariableW GetVersionExW GetTempPathW DeleteFileW GetCommandLineW LocalFree FormatMessageW MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource GetFileAttributesW CloseHandle GetLastError CreateFileW ReadFile WriteFile SetFilePointer GetFileSize CreateFileA SetHandleCount

user32

DestroyMenu UnregisterClassW LoadCursorW GetSysColorBrush RegisterWindowMessageW SendDlgItemMessageA WinHelpW GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx DefWindowProcW CallWindowProcW CopyRect PtInRect GetMenu SystemParametersInfoA GetWindowPlacement GetWindowRect GetSysColor EndPaint BeginPaint ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW UnhookWindowsHookEx GetDesktopWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetLastActivePopup SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow IsWindowVisible GetKeyState PeekMessageW GetCursorPos ValidateRect CharUpperW GetWindowTextW GetFocus GetParent SetWindowPos SetFocus IsWindowEnabled ShowWindow SetWindowLongW GetDlgCtrlID GetWindowLongW IsDialogMessageW SendDlgItemMessageW GetWindow PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu FindWindowW SetWindowTextW GetDlgItem EnableWindow IsWindow DrawIcon GetClientRect IsIconic SendMessageW LoadIconW PostMessageW GetSystemMetrics MessageBoxW

gdi32

DeleteDC GetStockObject Escape ExtTextOutW TextOutW RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetDeviceCaps CreateFontW GetObjectW DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC CreateBitmap SelectObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegEnumKeyW RegDeleteKeyW RegOpenKeyW RegFlushKey RegCreateKeyW RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW RegQueryValueW

shell32

SHGetPathFromIDListW SHGetMalloc SHGetFolderPathW ord165 SHBrowseForFolderW

shlwapi

PathFindExtensionW PathStripToRootW PathIsUNCW PathFindFileNameW

oleaut32

VariantClear VariantChangeType VariantInit

oleacc

CreateStdAccessibleObject LresultFromObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_bb73d39bd63ace2be3deaec18ed09044_amadey_elex_smoke-loader_stop

msi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

oleacc

generic