2026-07-31_df168ea08b193c995b4ec6a89915038a_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_df168ea08b193c995b4ec6a89915038a_amadey_elex_smoke-loader
Size 32.6MB
Sample260731-krydjsdj7v
SHA256 772abb50008fb7dc49cd4fdfb51a355248947f5b0881013da3481ac178293343
MD5 df168ea08b193c995b4ec6a89915038a
SHA1 902859b7da31851957ca15a78aeddc7224c31457
SHA512 8af255fa9f773d5072ed5525073d03c326bba9257b45033a85ec94a2c2f09727771fd46316abcc63f3e80e1172fc851e3a513ca9f7f976d5697efa7c6f0b5221
SSDEEP 786432:lNjGh3PtZYymfkuX/M687pigWB0wZ7nWZIg8m6hdrHLlxKqo+uSaiB:lNahlZYymfkGM/7pixXZ7nW2g8hDrHKA
TLSH
T19F7733A655F84837F1F31B33ECF4254065FABD65793EC84A47D0161CBEB86819A02BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-07-31_df168ea08b193c995b4ec6a89915038a_amadey_elex_smoke-loader

.exe 32.6MB

2026-07-31_df168ea08b193c995b4ec6a89915038a_amadey_elex_smoke-loader

IMPHASH e8a0668de7394a4727506605b3d3028c
SHA256 772abb50008fb7dc49cd4fdfb51a355248947f5b0881013da3481ac178293343
MD5 df168ea08b193c995b4ec6a89915038a
SHA1 902859b7da31851957ca15a78aeddc7224c31457
SHA512 8af255fa9f773d5072ed5525073d03c326bba9257b45033a85ec94a2c2f09727771fd46316abcc63f3e80e1172fc851e3a513ca9f7f976d5697efa7c6f0b5221
SSDEEP 786432:lNjGh3PtZYymfkuX/M687pigWB0wZ7nWZIg8m6hdrHLlxKqo+uSaiB:lNahlZYymfkGM/7pixXZ7nW2g8hDrHKA
TLSH
T19F7733A655F84837F1F31B33ECF4254065FABD65793EC84A47D0161CBEB86819A02BA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

dd:90:8f:ac:02:6e:80:ce:39:9a:9f:94:9a:9a:55:90:89:81:67:eb:47:d2:1b:df:b4:cb:65:a4:9f:e4:2e:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=HP Inc.,O=HP Inc.,L=Palo Alto,ST=California,C=US

Chains

Nov 30, 2021

CN=HP Inc.,O=HP Inc.,L=Palo Alto,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=HP Inc.,O=HP Inc.,L=Palo Alto,ST=California,C=US

Serial Number

02:80:ae:12:d4:c5:28:dc:0a:a1:06:fb:9f:17:aa:37

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 16, 2021 - Apr 21, 2022

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

151735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetUserDefaultUILanguage GetVersionExA GetCurrentProcess GetProcAddress DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar WideCharToMultiByte GetLastError AreFileApisANSI LoadLibraryExW LoadLibraryW GetModuleFileNameW GetModuleFileNameA LocalFree FormatMessageW FormatMessageA GetSystemDirectoryW CloseHandle SetFileTime CreateFileW SetLastError SetFileAttributesW SetFileAttributesA RemoveDirectoryW RemoveDirectoryA GetModuleHandleW CreateDirectoryW CreateDirectoryA DeleteFileW DeleteFileA SetCurrentDirectoryW SetCurrentDirectoryA GetCurrentDirectoryW GetCurrentDirectoryA GetTempPathW GetTempPathA GetCurrentProcessId GetCurrentThreadId FindClose FindFirstFileW FindFirstFileA FindNextFileW FindNextFileA GetFileAttributesW GetFileAttributesA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile CreateFileA GetModuleHandleA GetProcessAffinityMask GetSystemInfo GlobalMemoryStatus GetFileInformationByHandle GetStdHandle WaitForMultipleObjects Sleep VirtualAlloc VirtualFree lstrcatW lstrlenW WaitForSingleObject CreateEventA SetEvent ResetEvent InitializeCriticalSection DuplicateHandle GetEnvironmentVariableW Process32Next OpenProcess Process32First CreateToolhelp32Snapshot GetExitCodeProcess CreateProcessA GetCommandLineW WriteConsoleW SetStdHandle FlushFileBuffers LCMapStringW GetStringTypeW GetConsoleMode GetConsoleCP GetSystemTimeAsFileTime QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW HeapSize IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InterlockedDecrement InterlockedIncrement TlsFree EnumResourceLanguagesA GetUserDefaultLangID GetTickCount TlsSetValue TlsGetValue TlsAlloc GetStartupInfoW HeapSetInformation GetCommandLineA ExitProcess CreateThread ExitThread HeapReAlloc HeapFree HeapAlloc RaiseException EncodePointer DecodePointer RtlUnwind

user32

GetDlgItem SetWindowTextW LoadStringW DestroyWindow LoadIconA EndDialog KillTimer SetTimer PostMessageA SendMessageA GetWindowTextLengthW GetWindowTextW SetWindowTextA GetWindowTextA GetWindowTextLengthA LoadStringA DialogBoxParamW DialogBoxParamA GetWindowLongA SetWindowLongA ShowWindow CharUpperA MessageBoxW CharUpperW

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHCreateDirectoryExA ShellExecuteExA SHCreateDirectoryExW

ole32

OleInitialize CoTaskMemFree

oleaut32

VariantClear SysAllocStringLen SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_df168ea08b193c995b4ec6a89915038a_amadey_elex_smoke-loader

kernel32

user32

advapi32

shell32

ole32

oleaut32

generic