2026-09-04_270d0810ad2373cb511f7c9f0d537f96_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-04_270d0810ad2373cb511f7c9f0d537f96_amadey_elex_smoke-loader
Size 1.6MB
Sample260905-thfltavvgv
SHA256 2f95dadb4fd94838668a65ab7b3ff637be68e6868b4ce83ff748c4ca894228db
MD5 270d0810ad2373cb511f7c9f0d537f96
SHA1 4e08c443ca6fb1faa5d14e5a5adecf2ff47ad2b6
SHA512 5dbdfdeee5fa4f592e082670951adc682a7ccc49ddd6b63f6e0b29a4cd0809afd9a8fd528db426c728cf2debcef7deaab3aa82e18cec56772128b4b91cb5a76c
SSDEEP 24576:JgzSphIq32vhSMXlohBCelhz6lv2XoZL4ER5:OzSphIl0o4oZL4s5
TLSH
T14E7501207A66C033D59152320A7C9FEE553DAD148FA516DF63E42A3EDE302C17A31E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_270d0810ad2373cb511f7c9f0d537f96_amadey_elex_smoke-loader

File Explorer

2026-09-04_270d0810ad2373cb511f7c9f0d537f96_amadey_elex_smoke-loader

.exe 1.6MB

2026-09-04_270d0810ad2373cb511f7c9f0d537f96_amadey_elex_smoke-loader

IMPHASH bde0ce54b06925ecffc5eef1f355f6fd
SHA256 2f95dadb4fd94838668a65ab7b3ff637be68e6868b4ce83ff748c4ca894228db
MD5 270d0810ad2373cb511f7c9f0d537f96
SHA1 4e08c443ca6fb1faa5d14e5a5adecf2ff47ad2b6
SHA512 5dbdfdeee5fa4f592e082670951adc682a7ccc49ddd6b63f6e0b29a4cd0809afd9a8fd528db426c728cf2debcef7deaab3aa82e18cec56772128b4b91cb5a76c
SSDEEP 24576:JgzSphIq32vhSMXlohBCelhz6lv2XoZL4ER5:OzSphIl0o4oZL4s5
TLSH
T14E7501207A66C033D59152320A7C9FEE553DAD148FA516DF63E42A3EDE302C17A31E6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

144916

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\workplace\Androws\p-c9a10cf9570f40899fe60201434789b7\Build\bin\Release\env_detect.pdb

opengl32

wglDeleteContext glGetString wglGetProcAddress wglMakeCurrent wglCreateContext

wtsapi32

WTSQueryUserToken

kernel32

CloseHandle RaiseException HeapAlloc DecodePointer GetProcAddress LocalFree DeleteCriticalSection GetProcessHeap GetModuleHandleW GetSystemTimeAsFileTime GetExitCodeProcess MultiByteToWideChar WideCharToMultiByte GetCurrentProcessId WTSGetActiveConsoleSessionId GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW GetFileAttributesExW GetLastError GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType GetFileSizeEx GetStdHandle CreateFileW WaitForSingleObject GetLocaleInfoW InitializeCriticalSectionEx GetModuleFileNameW TerminateProcess GetModuleHandleExW WriteFile GetCurrentProcess HeapFree GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle HeapSize FindClose FormatMessageA QueryPerformanceCounter QueryPerformanceFrequency InitOnceComplete InitOnceBeginInitialize CreateDirectoryW WriteConsoleW FindFirstFileExW FindNextFileW GetFileAttributesW SetEndOfFile SetFilePointerEx GetTempPathW AreFileApisANSI GetFileInformationByHandleEx InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection GetCurrentThreadId WaitForSingleObjectEx Sleep IsProcessorFeaturePresent FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW GetStringTypeW EncodePointer LCMapStringEx GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread ExitProcess

user32

RegisterClassW CreateWindowExW GetDC UnregisterClassW ReleaseDC DefWindowProcW DestroyWindow

gdi32

SetPixelFormat ChoosePixelFormat

shell32

ShellExecuteExW SHGetSpecialFolderPathW SHGetFolderPathW

advapi32

RevertToSelf RegDisablePredefinedCache ImpersonateLoggedOnUser RegQueryValueExW RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_270d0810ad2373cb511f7c9f0d537f96_amadey_elex_smoke-loader

opengl32

wtsapi32

kernel32

user32

gdi32

shell32

advapi32

generic