Overview
overview
4Static
static
32026-08-20...er.exe
windows10-2004-x64
42026-08-20...er.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...eg.dll
windows10-2004-x64
3$PLUGINSDI...eg.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ID.dll
windows10-2004-x64
3$PLUGINSDI...ID.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...rb.dll
windows10-2004-x64
3$PLUGINSDI...rb.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ar.dll
windows10-2004-x64
3$PLUGINSDI...ar.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nk.dll
windows10-2004-x64
3$PLUGINSDI...nk.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...lW.dll
windows10-2004-x64
3$PLUGINSDI...lW.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ON.dll
windows10-2004-x64
3$PLUGINSDI...ON.dll
windows11-ltsc_2024-x64
3General
- Target 2026-08-20_ae3ffa98148988d591839e085402a630_amadey_cloudeye_elex_hijackloader_smoke-loader
- Size 1.4MB
- Sample260820-3kl12sck9x
- SHA256 85589b13d3296c7aac4eeaf556b933c5517d907d0ca10505039e957fb7dcc492
- MD5 ae3ffa98148988d591839e085402a630
- SHA1 1a080aa7c17faac71c4d0b8439d4f62a4bdbd6fb
- SHA512 6f593b4c915f0229b1c96ab39d9885b450e55e5497073bf7cad7680ed0f17983b512a7b209ac225b0a88956f85b760bff376734f31e4806bcea03222d3bb3b2d
- SSDEEP 12288:5TyUjD5xR9euP+bnEPsSjlSoRUJDJG95+B7a2SooEP2WKtsm450:5TTjhmbEPsSjIot0BW1oZP21tT450
- TLSH T178657B01B790DC62D8AE493078F8D7262B39FDD16F61C6B7631AB35C4E717909A7820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-20_ae3ffa98148988d591839e085402a630_amadey_cloudeye_elex_hijackloader_smoke-loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-20_ae3ffa98148988d591839e085402a630_amadey_cloudeye_elex_hijackloader_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/AppAssocReg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/AppAssocReg.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ApplicationID.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/CityHash.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/CityHash.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/InvokeShellVerb.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/InvokeShellVerb.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/PinToTaskbar.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/PinToTaskbar.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/ServicesHelper.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/ServicesHelper.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/ShellLink.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/ShellLink.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/liteFirewallW.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/liteFirewallW.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsJSON.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsJSON.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-20_ae3ffa98148988d591839e085402a630_amadey_cloudeye_elex_hijackloader_smoke-loader
- Size 1.4MB
- SHA256 85589b13d3296c7aac4eeaf556b933c5517d907d0ca10505039e957fb7dcc492
- MD5 ae3ffa98148988d591839e085402a630
- SHA1 1a080aa7c17faac71c4d0b8439d4f62a4bdbd6fb
- SHA512 6f593b4c915f0229b1c96ab39d9885b450e55e5497073bf7cad7680ed0f17983b512a7b209ac225b0a88956f85b760bff376734f31e4806bcea03222d3bb3b2d
- SSDEEP 12288:5TyUjD5xR9euP+bnEPsSjlSoRUJDJG95+B7a2SooEP2WKtsm450:5TTjhmbEPsSjIot0BW1oZP21tT450
- TLSH T178657B01B790DC62D8AE493078F8D7262B39FDD16F61C6B7631AB35C4E717909A7820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/AccessControl.dll
- Size 21KB
- SHA256 ef4b548b27a6edab3bcb25cff0598918c645795850d62f232909dee851e04c6d
- MD5 eb7a540d0d2e28f6bf524d2cdbe0f478
- SHA1 76204991c60913cffeba5595033c4f79e1e89bd8
- SHA512 947132d07f7875dc99fbe8a87757f6efee0a8c6271f8a3bac6747f9f4f60ed7e203e28a588db8c55ee898ba8f3dcf640f6562c49c45d6c6d8fdbe2d2309b9984
- SSDEEP 384:8fX/qSSu13X9dGY+M47iw93L/pvDGFtart8E9VFK4imkGu6m328t1:8fXSz8X9MCqRDGFo+EA6D8z
- TLSH T1B9A25B968BF059F0F8B38E3531B45D1A4D7A7B5319F0C49F6226CA484B80746ADB83B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/AppAssocReg.dll
- Size 14KB
- SHA256 eeed86addbf5989fe54e862e68e9a287eeaad11b209c26de67ab660b21445e15
- MD5 012461cad43cc5a871bb2019a461a2e4
- SHA1 75617dce95008117b5b1bd602bbbe58dfda4e6d8
- SHA512 f1c42d0703e5c4fafae2fab90a7c23499e8b72f9e04ecc10602d1c48ca08781000cda36af86577b3e2380684ca442db54668f390822f3590b6dca6507e80fa2e
- SSDEEP 192:zJfFQBTidO4veM7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRzt8oOT3ip0lL:lfF6iddHvDGFtart8E9VFK4ittEipoL
- TLSH T105623AF787906C10DD6B8E3231D89D267EB2F7826A90C1EB4329C50057917877AFC29E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/ApplicationID.dll
- Size 55KB
- SHA256 a9dad9fdaae93d10dc2ee346b231913445e731049554b8bb1506827e46f8a44e
- MD5 fdc0338e6faeaf6f7c271982e103473b
- SHA1 9a41f7932abe8be7e32c6371f085cf14de355d00
- SHA512 a766eef11db4c94b1445d1cd70cf1d3b6141d6b3973562e9fa8d81c79195886b884dbc9b9f6952f8a6e8619534a6bf2d615d539d2cace9c8843dc19415051cc0
- SSDEEP 768:oY+N1V9Ek9B/3I2IIk85ZLa342QpIK0+KE1zRBoSLDGFo+EAM:oY+LpI2IIk85Fs+LNRBo1oyM
- TLSH T167438C10BA80D473C556983970E8DA225E7E7D122BF090D37FBA83694F617D0B67E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/CityHash.dll
- Size 53KB
- SHA256 c299a0a71bf57eb241868158b4fcfe839d15d5ba607e1bdc5499fdf67b334a14
- MD5 2021acc65fa998daa98131e20c4605be
- SHA1 2e8407cfe3b1a9d839ea391cfc423e8df8d8a390
- SHA512 cb96d3547bab778cbe94076be6765ed2ae07e183e4888d6c380f240b8c6708662a3b2b6b2294e38c48bc91bf2cc5fc7cfcd3afe63775151ba2fe34b06ce38948
- SSDEEP 768:jfXngOuwVTROMOZbPg9ao/wxsfJM3JuNUgo3BDGFo+EA3:j/hPVTRBO9NJYMMnomoy3
- TLSH T1C8439D31759189B3D59AC97230E49F2F7E7E7A011BE488D35B7984001F60BE1B27E35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/InvokeShellVerb.dll
- Size 14KB
- SHA256 2bcab0487134238f5109d1f4364b99b6d03941c2c091fba6d660eb2b92f65adb
- MD5 79eedad48e956f125b4b518f5351db5f
- SHA1 2bb8c4952a3310244394fa28b91797521ff7d154
- SHA512 bbab20281bd48b9ef285651c0fef385143465082254ec99435710e14d7389efbc93c6f4d571ada9d92e9e7648b230abf83d5a17b286f698c751026b8e8aa6f55
- SSDEEP 192:YpqLDCV7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRspFQChL:ZLDCXvDGFtart8E9VFK4iqpCE
- TLSH T10A621ABBC7906C61DC679D3230E89D2A6D75B7426B9080F7537AC0104B817C3AAFC29A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/PinToTaskbar.dll
- Size 3KB
- SHA256 6bec8a69845fe9012a0622e79b63328fb611151fd24f198a779d781a36dce5a3
- MD5 70016ab449dd0034333b0df88193cb82
- SHA1 add0b693b75f14e7f9a063d0de1921c3bc8d1a52
- SHA512 1295dbe8596a37d0799b51c3be011b2aeb499d382bd860bba784dbe5a580f6d2e1116830c4c619ef32df9c5f7af0aceb600c2c7a29e321cf8e355c73627ffc71
- TLSH T1297162F3F3644076E22903B84847C42CBABCAB1213AE4697789B611E2E50CC579A3D92
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/ServicesHelper.dll
- Size 14KB
- SHA256 d6f6758adac2c073bec481e8de762af3a5574789bce3f43de02356afc9911e0f
- MD5 b9e8c2212ac8dae4b0eaf97c048529fa
- SHA1 331d172323480b0518abdb0cc9e256dc7f46c357
- SHA512 d93aa032e27c8268a4f6883711cf41f7ee2b5d33673a26d78db24456f2c548af39b7b98ed4b4737245c278d524fffb3e4bf708b6815dc866acd371427ff6be96
- SSDEEP 192:UIHxGS7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHR5tHPk6NM:UR4vDGFtart8E9VFK4i/9kSM
- TLSH T148622BBB86A06C51DD668D3231988E2ABE7577456B90C0F7532AC1504BC1F8376FC2DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/ShellLink.dll
- Size 14KB
- SHA256 5f6f414b412c72b10f49eb92af1d368ede531b58fb200d539fd2b45e371612db
- MD5 fa94d120efb029b43217c66bbc8c650c
- SHA1 1fcf2d76adf69b403b7400681ac91d50ed20385f
- SHA512 07ed0771d5bbb651ea7421a5f6b08fa234f9cc041315d9360a7135ba12180064fc99a27725385a8ecd3ceb25bed5c00de169f7dabb3ccf6e987f45254dff8158
- SSDEEP 192:46J7JQCdiaR+7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRqt8kzN0eM2s:LJ7JQG2vDGFtart8E9VFK4ictvU2s
- TLSH T177623A6AC7A1EC90DC2BCD3730D4B9376A71AB8156A184EB576CC54047827873EFC0AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 22KB
- SHA256 b711c4f17690421c9dc8ddb9ed5a9ddc539b3a28f11e19c851e25dcfc7701c04
- MD5 b361682fa5e6a1906e754cfa08aa8d90
- SHA1 c6701aee0c866565de1b7c1f81fd88da56b395d3
- SHA512 2778f91c9bcf83277d26c71118a1ccb0fb3ce50e89729f14f4915bc65dd48503a77b1e5118ce774dea72f5ce3cc8681eb9ca3c55cf90e9f61a177101ba192ae9
- SSDEEP 384:78+Qlt70Fj/lQRY/9VjjgLZvDGFtart8E9VFK4ietffvtlh:7SqFjm6YL1DGFo+EA6tlh
- TLSH T153A27C62C7605CF1FD629D3430E4AE2B6F79BB496B9084E397AAC0405B817C365FD287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 28KB
- SHA256 ec6a56d981892bf251df1439bea425a5f6c7e1c7312d44bedd5e2957f270338c
- MD5 d23b256e9c12fe37d984bae5017c5f8c
- SHA1 fd698b58a563816b2260bbc50d7f864b33523121
- SHA512 13f284821324ffaeadafd3651f64d896186f47cf9a68735642cf37b37de777dba197067fbccd3a7411b5dc7976e510439253bd24c9be1d36c0a59d924c17ae8e
- SSDEEP 384:2lqVibvTh4qnFP+OPEzinclP++vDGFtart8E9VFK4iBSaXrwz1k:EqVavVfPkzhlmIDGFo+EAzrn
- TLSH T13CD28EA657D0467BE9731D3131E56A125F7AB9311E7184BF0A37C6842AA0B83BD7C30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 14KB
- SHA256 c6c413108539f141bea3f679e0e2ef705898c51ec7c2607f478a865fc5e2e2df
- MD5 610ad03dec634768cd91c7ed79672d67
- SHA1 dc8099d476e2b324c09db95059ec5fd3febe1e1e
- SHA512 18c3c92be81aadfa73884fe3bdf1fce96ccfbd35057600ef52788a871de293b64f677351ba2885c6e9ce5c3890c22471c92832ffc13ba544e9d0b347c5d33bfd
- SSDEEP 192:PmTH+kPMC7x0KDWpHFtH6cAAANa3Gy2sE9jBFKWJfsHRGz6ot87n5/:PWH+SvDGFtart8E9VFK4iczNwn5
- TLSH T169622BBBC6606C12DC668E7670E49D2B7A71B7916F9080E7132AC15047C1783BAFD1ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/liteFirewallW.dll
- Size 92KB
- SHA256 c0a12e651085aa2488796b474a5ca3bc70c22f1fd98ef854049b8d72987e478d
- MD5 f5a3005a46e051b8d9eb5e2be7802f7e
- SHA1 4fae43843bf6210d5d98683b50705824877a7d9a
- SHA512 4993fcfe6669dd1e3621ca50e35aad750bc6c89838abf94da4303c5a31e958b3d3bc2cf70c268590c8cd5cdbc90f015ffa37cf98548c2b54ea8171b63a3bfa0c
- SSDEEP 1536:tNiXc1jND/x0LI7W2kG3Crh520Hsy7xxz4J:79N7iPrh52ssyXe
- TLSH T1BE939E21B6E0C472C88BA9395464D7B25BBFB5316AE089877B68077D5F303C0977938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 17KB
- SHA256 7fb626aa05bee1095633a75aeb7895ebd816a98e0aa1581a0154e4c196de5391
- MD5 0e584c7120bd474c616013c58d51dc6b
- SHA1 0bc980892341b52985d92fb3d8fbb6be77951935
- SHA512 aa3a471b3f33c3ffdbe1b1e3c1e5d04367bcab3c16049396a8dd12c5a8317e4b153761f74f39b756dd4fb1806aedc4f1bb38bfbc12f16480eed3fd3087a0d157
- SSDEEP 384:qDrvAxnJGernNQZGdH7vDGFtart8E9VFK4ibEge:qDrkoernAGRLDGFo+EAxe
- TLSH T12C824CB685C02C55D85A8D353098AD1B6BB5B7462BA184F3533FC19057C1BC3FABC2D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsJSON.dll
- Size 33KB
- SHA256 705f4947fb94254c4e5084e6a962045f6a4e790dfc1ecf59cd0fc3feb38bcbbf
- MD5 e832077eaee06f3b2ac9a8d2e7264567
- SHA1 decbc329257c9c7fb67d3c449b4c5dfc1f87471f
- SHA512 c1bada98c52ee2318d23c48fe202380eb42c5e1f18226cdc017f264c8c34f548bfe4d9b6eef13caae69ba321a71b199431b249fdec65f8bb1c386810932ccf6a
- SSDEEP 768:QoZ1ZnhrTfldqk7Yyy94RxOcVQJrTuDGFo+EAe2:Vpi52vOcqlTvoyr
- TLSH T191F25D96977058F0F97B99B670B06E232E7EBA05295085EBC33785145A50B43BB3C337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10