2026-08-03_0cbae4d5944b09c7696bfae4a55681a3_amadey_elex_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_0cbae4d5944b09c7696bfae4a55681a3_amadey_elex_smoke-loader_stop
Size 3.2MB
Sample260804-qcntfsfl3v
SHA256 8afe008ce480ef886f3b27fcab8e9407f603627494a06ab66907783c53a7e565
MD5 0cbae4d5944b09c7696bfae4a55681a3
SHA1 4a807271bcfdc48113246735ba8b341ea5a15714
SHA512 3dac7fa7193d3b3b3e77eb36f881323337c2769b00c497bc5f7d7e15c517577ed9d89a5a95ea137b2a979c7b2679b89c872898a6a6ed65014b4538038be31f5c
SSDEEP 49152:MRqwqwE4nywrrkKoMbvfqQxbqLNALN2pI3tlRF2ZCh6Z9L92r2hcqGdINh:zwqwE4nypK9bbAC1HP0/4r2hc
TLSH
T1ADF5E025B7C29372F84F9F702905C55EA118EC304794A9A3F3446F1FB9F1A86AA34B53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_0cbae4d5944b09c7696bfae4a55681a3_amadey_elex_smoke-loader_stop

File Explorer

2026-08-03_0cbae4d5944b09c7696bfae4a55681a3_amadey_elex_smoke-loader_stop

.exe 3.2MB

2026-08-03_0cbae4d5944b09c7696bfae4a55681a3_amadey_elex_smoke-loader_stop

IMPHASH 8129fd769ef1a856285d009458dc1e4a
SHA256 8afe008ce480ef886f3b27fcab8e9407f603627494a06ab66907783c53a7e565
MD5 0cbae4d5944b09c7696bfae4a55681a3
SHA1 4a807271bcfdc48113246735ba8b341ea5a15714
SHA512 3dac7fa7193d3b3b3e77eb36f881323337c2769b00c497bc5f7d7e15c517577ed9d89a5a95ea137b2a979c7b2679b89c872898a6a6ed65014b4538038be31f5c
SSDEEP 49152:MRqwqwE4nywrrkKoMbvfqQxbqLNALN2pI3tlRF2ZCh6Z9L92r2hcqGdINh:zwqwE4nypK9bbAC1HP0/4r2hc
TLSH
T1ADF5E025B7C29372F84F9F702905C55EA118EC304794A9A3F3446F1FB9F1A86AA34B53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3409709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

hm\o6]QI

Size

820KB

Virtual Size

820KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

iKM\S>aA

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

:/V&kEq5

Size

595KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

sHkXBPs/

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

&DL!:GoG

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

"4trY$@V

Size

37KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

\:qnx*Mb

Size

20KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Aeg<5=iZ

Size

42KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

5jSOe%m/

Size

38KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

^FZfo``R

Size

45KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

9XNJVM:u

Size

569KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

rJ,?auAg

Size

71KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

;H:e7gSK

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

2026-08-03_0cbae4d5944b09c7696bfae4a55681a3_amadey_elex_smoke-loader_stop

msvbvm60

kernel32

user32

generic