2026-07-30_d759454f80fdd51aae80352fa8640878_amadey_elex_maze_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_d759454f80fdd51aae80352fa8640878_amadey_elex_maze_smoke-loader
Size 6.6MB
Sample260730-r827dsbc28
SHA256 c99b819599fdde505b2f59ef0fd66595d0367590fb5f62ec7880d785c216dff6
MD5 d759454f80fdd51aae80352fa8640878
SHA1 700ca9e143f35f6bff841a3f9e14ddc377628213
SHA512 6828d49422af34ed24a5429f4abfef9f24962d29611b8e2caeac5ca0a488dc2a537f3036ef66b7ab904d2e3c6b6db50d4d022550596b4db6586bfaf732249202
SSDEEP 196608:gT9KkWrP7424J2t144pfheTVe2110L/OUxnWgTyFySVZGb6k:YQkWrP74Z2t1ve/1c2u+FDt
TLSH
T1DC660102B740D122E54B0174791EE399A178B930466A8C83B7C4BF1FB9B1BD6E936F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_d759454f80fdd51aae80352fa8640878_amadey_elex_maze_smoke-loader

File Explorer

2026-07-30_d759454f80fdd51aae80352fa8640878_amadey_elex_maze_smoke-loader

.exe 6.6MB

2026-07-30_d759454f80fdd51aae80352fa8640878_amadey_elex_maze_smoke-loader

IMPHASH 97447dd8411d8556d91550baa4f00fa6
SHA256 c99b819599fdde505b2f59ef0fd66595d0367590fb5f62ec7880d785c216dff6
MD5 d759454f80fdd51aae80352fa8640878
SHA1 700ca9e143f35f6bff841a3f9e14ddc377628213
SHA512 6828d49422af34ed24a5429f4abfef9f24962d29611b8e2caeac5ca0a488dc2a537f3036ef66b7ab904d2e3c6b6db50d4d022550596b4db6586bfaf732249202
SSDEEP 196608:gT9KkWrP7424J2t144pfheTVe2110L/OUxnWgTyFySVZGb6k:YQkWrP74Z2t1ve/1c2u+FDt
TLSH
T1DC660102B740D122E54B0174791EE399A178B930466A8C83B7C4BF1FB9B1BD6E936F47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

253535

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InitializeCriticalSectionAndSpinCount Sleep FormatMessageW GetSystemTimeAdjustment GetVersionExW HeapDestroy GetFileAttributesA lstrcpynW IsProcessorFeaturePresent Beep CreateProcessA FileTimeToSystemTime GetTimeZoneInformation GetACP FlushFileBuffers RaiseException GetPrivateProfileIntW VerifyVersionInfoW FindFirstFileA GetLastError SetLastError CreateNamedPipeA IsValidCodePage GlobalFree ResetEvent LoadLibraryA CreateFileMappingA GetFileType GetExitCodeThread DeviceIoControl EnumResourceTypesW GetModuleFileNameA FindNextFileA GetThreadPriority GetStringTypeW VirtualProtect GetUserDefaultUILanguage TlsAlloc CloseHandle IsValidLocale TlsFree lstrcpyW DeleteFileA ExpandEnvironmentStringsW CreateThread WriteConsoleW SetStdHandle ReadConsoleW ReadFile OutputDebugStringW SetFilePointerEx GetConsoleMode GetConsoleCP LCMapStringW HeapReAlloc GetCPInfo GetOEMCP GetModuleHandleW TlsSetValue TlsGetValue TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter CreateFileW FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile LoadLibraryW GetSystemDirectoryW GetUserDefaultLangID VirtualQueryEx ClearCommBreak GetWindowsDirectoryA VirtualFree ConnectNamedPipe SetCommBreak GetLogicalDrives GetUserDefaultLCID SetHandleInformation HeapFree InitializeSListHead CompareFileTime GetCurrentProcess WaitNamedPipeA GetCommState LoadLibraryExW EnumCalendarInfoW FindResourceW FreeLibrary SetEndOfFile UnmapViewOfFile RtlCaptureContext FindFirstFileW CreateFileA GetDateFormatW GetEnvironmentVariableW EncodePointer GetCommandLineW DeleteFileW GetFullPathNameW GetModuleFileNameW GetProcessHeap GetCurrentThreadId GetStartupInfoW DeleteCriticalSection GetStdHandle LeaveCriticalSection EnterCriticalSection IsDebuggerPresent HeapAlloc HeapSize WideCharToMultiByte DecodePointer RtlUnwind ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar

user32

GetWindow IsRectEmpty GetDlgItemInt CharUpperBuffW IsIconic DrawIconEx DrawTextExW CreateIconIndirect GetDC DrawFocusRect InflateRect LoadMenuW SystemParametersInfoW DrawStateW CharUpperW SetWindowLongW SendDlgItemMessageW GetDesktopWindow GetSysColorBrush DrawMenuBar GetMenuItemCount InsertMenuW BeginDeferWindowPos ValidateRgn MapWindowPoints EndMenu GetDlgCtrlID ToUnicode DrawFrameControl SetMenuItemInfoW CopyRect GetWindowThreadProcessId ModifyMenuW

gdi32

SetLayout Arc SetViewportOrgEx ExtFloodFill SetWindowExtEx GetMetaFileBitsEx CreateHatchBrush Polygon GetEnhMetaFileHeader PtInRegion Ellipse OffsetRgn SetPolyFillMode StretchDIBits SetStretchBltMode SetROP2 CloseEnhMetaFile CreateEnhMetaFileW CreatePolygonRgn

comdlg32

GetSaveFileNameW

advapi32

RegCloseKey AdjustTokenPrivileges ControlService RegSetKeySecurity RegConnectRegistryW RegOpenKeyExA LookupPrivilegeValueW OpenSCManagerW CloseServiceHandle RegUnLoadKeyW

shell32

ShellExecuteW Shell_NotifyIconW

ole32

CoInitialize

oleaut32

SafeArrayGetUBound SysFreeString SafeArrayPtrOfIndex VariantInit VariantCopy VariantClear SysReAllocStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_d759454f80fdd51aae80352fa8640878_amadey_elex_maze_smoke-loader

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic