2026-09-10_41c1d086adc220e034642cbb4eec26cd_akira_amadey_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_41c1d086adc220e034642cbb4eec26cd_akira_amadey_elex
Size 1011KB
Sample260910-v778sstara
SHA256 7c199ea9db18c2f99e2ec2dc339a0fd4d8441adedf4589a0c7508bb492066c65
MD5 41c1d086adc220e034642cbb4eec26cd
SHA1 dfe331bcbec88db5d8a3b9c008e7596cf75668df
SHA512 314467191d6f0c4a3cb8077f9f0cfcf3039fddd8e1c3b57fdb809b170c268727e8dad7dad97bfc15b0761d43fe228879ba91d649d2e64f069e722c0c619947b9
SSDEEP 24576:/ALoRgQ63Ish5fmK92dlYTEs5ftul72PnC:/AkRgJ4a5bNtu0/C
TLSH
T1CA256D30AA4AD1B2DD4600B18DEDEB6E903CBD350B2505D3B3D49E5E79245C32F36A6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-09-10_41c1d086adc220e034642cbb4eec26cd_akira_amadey_elex

.exe 1011KB

2026-09-10_41c1d086adc220e034642cbb4eec26cd_akira_amadey_elex

IMPHASH 1163fa81c6761a2df8f5ae9db9d68296
SHA256 7c199ea9db18c2f99e2ec2dc339a0fd4d8441adedf4589a0c7508bb492066c65
MD5 41c1d086adc220e034642cbb4eec26cd
SHA1 dfe331bcbec88db5d8a3b9c008e7596cf75668df
SHA512 314467191d6f0c4a3cb8077f9f0cfcf3039fddd8e1c3b57fdb809b170c268727e8dad7dad97bfc15b0761d43fe228879ba91d649d2e64f069e722c0c619947b9
SSDEEP 24576:/ALoRgQ63Ish5fmK92dlYTEs5ftul72PnC:/AkRgJ4a5bNtu0/C
TLSH
T1CA256D30AA4AD1B2DD4600B18DEDEB6E903CBD350B2505D3B3D49E5E79245C32F36A6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

f1:52:56:49:1b:35:9d:7e:77:ce:07:fa:b9:fb:7a:ae:ac:66:34:4a:98:61:ae:44:57:95:7b:b2:ba:da:10:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 10, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1d:4d:19:c8:4e:d7:0f:57:48:00:00:00:00:02:1d

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1e:a3:ac:a4:6e:39:6f:7c:49:00:01:00:00:02:1e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

740000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\__w\1\s\bin\Win32\Release\OpenConsole.pdb

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA GetProcAddress LoadLibraryExW FreeLibrary GetModuleHandleW LoadResource LoadStringW GetModuleHandleExW FindResourceExW LockResource LoadLibraryExA GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx ReleaseSemaphore WaitForSingleObject ReleaseMutex OpenSemaphoreW CreateMutexExW AcquireSRWLockShared InitializeCriticalSectionAndSpinCount ReleaseSRWLockShared CreateSemaphoreExW DeleteCriticalSection CreateEventExW ResetEvent ReleaseSRWLockExclusive AcquireSRWLockExclusive WaitForSingleObjectEx SetEvent

api-ms-win-core-heap-l1-1-0

HeapAlloc GetProcessHeap HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError

api-ms-win-core-processthreads-l1-1-0

TerminateProcess GetStartupInfoW DeleteProcThreadAttributeList InitializeProcThreadAttributeList UpdateProcThreadAttribute TlsAlloc TlsGetValue CreateProcessW OpenProcessToken ExitProcess TlsSetValue CreateThread GetProcessTimes TlsFree ExitThread SetProcessShutdownParameters GetCurrentThreadId GetCurrentProcessId GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW GetLocaleInfoEx IsValidCodePage GetUserDefaultLocaleName GetCPInfo GetOEMCP FormatMessageA GetACP

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringW DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-string-l1-1-0

MultiByteToWideChar CompareStringOrdinal WideCharToMultiByte

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError RoOriginateErrorW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer EventSetInformation EventUnregister EventRegister

api-ms-win-core-processenvironment-l1-1-0

SearchPathW ExpandEnvironmentStringsW GetStdHandle SetEnvironmentVariableW GetCommandLineW GetEnvironmentVariableW

api-ms-win-core-com-l1-1-0

CoCreateInstance CoTaskMemAlloc IIDFromString CoInitializeEx CoResumeClassObjects CoTaskMemFree CoUninitialize CoRegisterClassObject CoRevokeClassObject CoAddRefServerProcess CoReleaseServerProcess

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-winrt-l1-1-0

RoRegisterActivationFactories RoRevokeActivationFactories

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer WindowsIsStringEmpty WindowsDeleteString WindowsCreateString WindowsStringHasEmbeddedNull

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeAllConditionVariable WaitOnAddress InitOnceExecuteOnce Sleep WakeByAddressSingle SleepConditionVariableSRW

ntdll

NtQueryVolumeInformationFile NtQueryInformationFile

api-ms-win-crt-runtime-l1-1-0

exit _exit terminate _set_app_type _configure_wide_argv _c_exit _register_thread_local_exe_atexit_callback _initialize_wide_environment _invoke_watson _errno _get_wide_winmain_command_line _invalid_parameter_noinfo _controlfp_s abort _initterm _seh_filter_exe _initialize_onexit_table _register_onexit_function _crt_atexit _initterm_e _cexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __p__commode _set_fmode __stdio_common_vsprintf_s __stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcsnlen wcsncmp wcscpy_s strcpy_s towlower

api-ms-win-crt-convert-l1-1-0

wcstol wcstoul

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks CreateThreadpoolWait CreateThreadpoolTimer SetThreadpoolWait CloseThreadpoolTimer SetThreadpoolTimer CloseThreadpoolWait

ext-ms-win-uiacore-l1-1-0

UiaHostProviderFromHwnd UiaReturnRawElementProvider

oleaut32

VariantClear SafeArrayDestroy VariantInit SysFreeString SysAllocString SafeArrayCreateVector SafeArrayPutElement SysStringLen

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor SetProcessDpiAwareness

api-ms-win-ntuser-sysparams-l1-1-0

GetMonitorInfoW GetSystemMetrics SystemParametersInfoW

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock GlobalSize GlobalUnlock

api-ms-win-core-heap-l2-1-0

LocalFree GlobalFree GlobalAlloc

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-registry-l1-1-0

RegEnumValueW RegQueryValueExW RegOpenCurrentUser RegCloseKey RegGetValueW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetSystemDirectoryW GetWindowsDirectoryW GetTickCount64 GetSystemInfo

ext-ms-win-uiacore-l1-1-1

UiaRaiseAutomationEvent UiaGetReservedNotSupportedValue UiaGetReservedMixedAttributeValue

propsys

PropVariantToInt16 PropVariantToBoolean PropVariantToUInt32

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName

api-ms-win-core-path-l1-1-0

PathCchRemoveExtension

api-ms-win-core-registry-l2-1-0

RegCreateKeyW RegOpenKeyW

api-ms-win-core-processthreads-l1-1-1

OpenProcess IsProcessorFeaturePresent

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

api-ms-win-core-namedpipe-l1-1-0

CreatePipe

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-file-l1-1-0

FindFirstFileExW WriteFile FindNextFileW ReadFile FindFirstFileW FindClose CreateFileW GetFileAttributesExW

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwind

user32

FillRect GetIconInfo CopyImage ScrollDC ScrollWindowEx InvertRect IsWindowVisible PrivateExtractIconsW ReleaseDC GetDC GetKeyState VkKeyScanW MapVirtualKeyW IsIconic PostMessageW SendMessageW LoadIconW LoadImageW CloseClipboard ShowWindow GetWindowLongW EmptyClipboard UnhookWindowsHookEx GetClipboardData OpenClipboard SetClipboardData RegisterClipboardFormatW CheckRadioButton CheckDlgButton SetDlgItemTextW SendDlgItemMessageW DestroyWindow GetDlgItemTextW IsDlgButtonChecked EndDialog DialogBoxParamW LoadCursorW GetWindowThreadProcessId DefWindowProcW SetWindowPos SetScrollInfo GetWindowRect SetLayeredWindowAttributes IsZoomed GetDpiForWindow OffsetRect GetCursorPos GetClientRect MapWindowPoints ClientToScreen TrackPopupMenuEx SendMessageTimeoutW SetWindowTextW BeginPaint EndPaint SetForegroundWindow SendNotifyMessageW GetSystemMenu LoadMenuW AppendMenuW SetMenuItemInfoW SetFocus GetForegroundWindow EnableMenuItem GetDoubleClickTime SetWindowLongW DispatchMessageW AdjustWindowRectEx IsWindow NotifyWinEvent GetSysColor MonitorFromRect KillTimer SetTimer ShowWindowAsync MonitorFromWindow GetWindowInfo GetCaretBlinkTime GetKeyboardState ToUnicodeEx ScreenToClient GetKeyboardLayout CreateWindowExW SetActiveWindow RegisterClassExW SetCapture ReleaseCapture SetWindowsHookExW GetMessageW DestroyIcon EnableScrollBar

gdi32

SetTextColor AddFontMemResourceEx GetCharWidth32W StretchDIBits ExtCreatePen SetBkColor GetObjectW CreateSolidBrush PolyBezier GetTextFaceW SetGraphicsMode CreateFontIndirectA IntersectClipRect SelectClipRgn SetDCBrushColor SelectObject LineTo TranslateCharsetInfo SetWorldTransform ModifyWorldTransform MoveToEx PatBlt SetStretchBltMode GdiFlush BitBlt CreateCompatibleBitmap GetTextMetricsW DeleteObject GetGlyphIndicesW RemoveFontMemResourceEx DeleteDC GetCharABCWidthsW GetTextExtentPoint32W CreateFontIndirectW ExtTextOutW GetOutlineTextMetricsW GetStockObject CreateCompatibleDC

shell32

DragFinish ord102 DragQueryFileW

winmm

PlaySoundW

imm32

ImmDisableIME

usp10

ScriptStringOut ScriptIsComplex ScriptStringAnalyse ScriptStringFree

api-ms-win-crt-heap-l1-1-0

free _set_new_mode _aligned_free calloc _aligned_malloc malloc _callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr lroundf roundf _libm_sse2_log10_precise _libm_sse2_pow_precise _libm_sse2_sqrt_precise ceil floor lrintf lround

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-core-memory-l1-1-0

VirtualFree VirtualProtect VirtualAlloc VirtualQuery

d2d1

ord1

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DReflect D3DCompileFromFile

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

Name

.text

Size

769KB

Virtual Size

768KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

153KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_41c1d086adc220e034642cbb4eec26cd_akira_amadey_elex

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

ntdll

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-core-threadpool-l1-2-0

ext-ms-win-uiacore-l1-1-0

oleaut32

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-shcore-scaling-l1-1-1

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-processthreads-l1-1-3

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-largeinteger-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

ext-ms-win-uiacore-l1-1-1

propsys

api-ms-win-shell-namespace-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-shcore-obsolete-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-sidebyside-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

user32

gdi32

shell32

winmm

imm32

usp10

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-core-memory-l1-1-0

d2d1

dwrite

dxgi

d3d11

d3dcompiler_47

api-ms-win-core-version-l1-1-0

api-ms-win-core-realtime-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-file-l2-1-0

generic