2026-09-08_fe7e4ff33abf238da4efdd5fb548ec84_amadey_elex_smoke-loader_upatre

General

Target
2026-09-08_fe7e4ff33abf238da4efdd5fb548ec84_amadey_elex_smoke-loader_upatre
Size 612KB
Sample260910-bpnxnatbka
SHA256 276d6b50b6816b947e8b944e05c93fb8d766d6f9102687488322bc64ab6615ee
MD5 fe7e4ff33abf238da4efdd5fb548ec84
SHA1 6da149d69f4f56d4f8b484107a76491f23f90058
SHA512 0d57c2bb3fe4c487dc4e98581c2010eb43645df9e621baf648aecbf05a67fc63f4838ca513fd9cb520b14446a4accc09afd648005ea45bd1a8338469e7ad9991
SSDEEP 12288:qGJPkmvqGPnrpuFnQZfWZvY2tC0ewff6faysGn61N:RFkmLfttMvsgfYabxf
TLSH
T1ABD41A93C37923D9C8549BFC5A0E66C8D97B4831C813DA83CE17980719FC9998DEEA53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_fe7e4ff33abf238da4efdd5fb548ec84_amadey_elex_smoke-loader_upatre

File Explorer

2026-09-08_fe7e4ff33abf238da4efdd5fb548ec84_amadey_elex_smoke-loader_upatre

.exe 612KB

2026-09-08_fe7e4ff33abf238da4efdd5fb548ec84_amadey_elex_smoke-loader_upatre

IMPHASH 2fe8205c5e73abbee67663f2eaca9756
SHA256 276d6b50b6816b947e8b944e05c93fb8d766d6f9102687488322bc64ab6615ee
MD5 fe7e4ff33abf238da4efdd5fb548ec84
SHA1 6da149d69f4f56d4f8b484107a76491f23f90058
SHA512 0d57c2bb3fe4c487dc4e98581c2010eb43645df9e621baf648aecbf05a67fc63f4838ca513fd9cb520b14446a4accc09afd648005ea45bd1a8338469e7ad9991
SSDEEP 12288:qGJPkmvqGPnrpuFnQZfWZvY2tC0ewff6faysGn61N:RFkmLfttMvsgfYabxf
TLSH
T1ABD41A93C37923D9C8549BFC5A0E66C8D97B4831C813DA83CE17980719FC9998DEEA53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

501720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetMessageA GetClientRect DispatchMessageA MoveWindow CreateWindowExA RegisterClassExA DefWindowProcA SendMessageA LoadIconA LoadCursorA PostMessageA SetScrollInfo SetWindowTextA SetMenuItemInfoA ReleaseCapture LoadStringA InsertMenuItemA CharUpperA RegisterWindowMessageA ScrollWindow GetCapture ShowCursor CreateCursor DragDetect DestroyCursor SetPropA AppendMenuA GetPropA CreateAcceleratorTableA RemovePropA CreateDialogIndirectParamA FindWindowA GetMenu TranslateAcceleratorA

kernel32

VirtualQuery GetSystemInfo VirtualProtect RtlUnwind GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSection GetCPInfo GetOEMCP GetACP LoadLibraryA EnterCriticalSection CreateDirectoryA Sleep GetCurrentProcess GetModuleHandleA GetProcessHeap HeapAlloc GetTickCount UnhandledExceptionFilter LeaveCriticalSection GetStartupInfoA GetCommandLineA GetVersionExA ExitProcess GetProcAddress TerminateProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsFree SetLastError GetCurrentThreadId TlsSetValue TlsGetValue TlsAlloc HeapDestroy HeapCreate VirtualFree HeapFree

gdi32

CreatePen CreateFontIndirectA DeleteObject GetStockObject

shell32

CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_fe7e4ff33abf238da4efdd5fb548ec84_amadey_elex_smoke-loader_upatre

user32

kernel32

gdi32

shell32

generic