General
- Target 2026-08-01_9656d04c3733bfbf37e027c6460b2395_amadey_elex_smoke-loader_stop
- Size 3.3MB
- Sample260801-kaj5la1eld
- SHA256 a4a6f4b8a418d6d271e3c7c59473ddebf9cd25635ebff67cec93f3f1c8cb3754
- MD5 9656d04c3733bfbf37e027c6460b2395
- SHA1 9c14a9335238843904b4d8f6a5b63c9d52e4e228
- SHA512 a8f04dd02ae08874b019c41c450d18f20321755f416da2c8e2f27902bbc98e1b14edbe94050e8a9ca75c000951f7881ae429831d6c12c9fd864e96146ab0b29b
- SSDEEP 49152:vaEaMXHqU88dcrJNWtRiTkZNmDaWFT6ESriPVYhI1FqbU7+C1GBmr3xnuNhSD8kC:9Hq7rJcriTkZgzlmhGqQKC+qBp7JwZ
- TLSH T1EFF52352F76280F5C89715752823E33DFB3497111BACCCE3DB8499A06D62592BA3B38D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_9656d04c3733bfbf37e027c6460b2395_amadey_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_9656d04c3733bfbf37e027c6460b2395_amadey_elex_smoke-loader_stop
- Size 3.3MB
- SHA256 a4a6f4b8a418d6d271e3c7c59473ddebf9cd25635ebff67cec93f3f1c8cb3754
- MD5 9656d04c3733bfbf37e027c6460b2395
- SHA1 9c14a9335238843904b4d8f6a5b63c9d52e4e228
- SHA512 a8f04dd02ae08874b019c41c450d18f20321755f416da2c8e2f27902bbc98e1b14edbe94050e8a9ca75c000951f7881ae429831d6c12c9fd864e96146ab0b29b
- SSDEEP 49152:vaEaMXHqU88dcrJNWtRiTkZNmDaWFT6ESriPVYhI1FqbU7+C1GBmr3xnuNhSD8kC:9Hq7rJcriTkZgzlmhGqQKC+qBp7JwZ
- TLSH T1EFF52352F76280F5C89715752823E33DFB3497111BACCCE3DB8499A06D62592BA3B38D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger