2026-09-21_a826a8b426d9adfac925bab6cfdbf253_amadey_elex_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-21_a826a8b426d9adfac925bab6cfdbf253_amadey_elex_smoke-loader_stop
Size 7.9MB
Sample260922-m2ncfacf47
SHA256 8d3d6b3c4ac674932afeae0a4dbcb43359aeb21a4914668ce891226b46ef5772
MD5 a826a8b426d9adfac925bab6cfdbf253
SHA1 9b811d67dcdbd3d02426b1cb1dd690e1332581d6
SHA512 3c5db7e04ca21e8d5c4817afb0b1146da9b59132817002c5a7ce9bbb870e0496e4643e301ae48685c72eaa4b6a23cd7ec56bb212c9723fb6d3de0635288fe89d
SSDEEP 196608:NAQBPugsTPLmHm166m+2qbv9emugIUz2R1rxSx87h/3Mm:yQBP7sTPqHmA65FemugIjxSx0h0
TLSH
T1BB8633BEF685C99DD60600321C1783A5AEB15D904FD46AF37369F66C4E300E3A67F688
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_a826a8b426d9adfac925bab6cfdbf253_amadey_elex_smoke-loader_stop

File Explorer

2026-09-21_a826a8b426d9adfac925bab6cfdbf253_amadey_elex_smoke-loader_stop

.exe 7.9MB

2026-09-21_a826a8b426d9adfac925bab6cfdbf253_amadey_elex_smoke-loader_stop

IMPHASH 34d5a649297c705f9406a6d203caf679
SHA256 8d3d6b3c4ac674932afeae0a4dbcb43359aeb21a4914668ce891226b46ef5772
MD5 a826a8b426d9adfac925bab6cfdbf253
SHA1 9b811d67dcdbd3d02426b1cb1dd690e1332581d6
SHA512 3c5db7e04ca21e8d5c4817afb0b1146da9b59132817002c5a7ce9bbb870e0496e4643e301ae48685c72eaa4b6a23cd7ec56bb212c9723fb6d3de0635288fe89d
SSDEEP 196608:NAQBPugsTPLmHm166m+2qbv9emugIUz2R1rxSx87h/3Mm:yQBP7sTPqHmA65FemugIjxSx0h0
TLSH
T1BB8633BEF685C99DD60600321C1783A5AEB15D904FD46AF37369F66C4E300E3A67F688
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8282551

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\ccview$\ase_installers_main\ase_installers\utilities\pacman\release\PackageManager.pdb

kernel32

GetFileAttributesA DosDateTimeToFileTime LocalFileTimeToFileTime SetFileTime SetFileAttributesA FindResourceA GetModuleFileNameA LoadLibraryA LoadResource SizeofResource LockResource FreeLibrary CreateDirectoryA CopyFileA BeginUpdateResourceA UpdateResourceA EndUpdateResourceA DeleteFileA GetLastError WriteFile CreateProcessA FileTimeToDosDateTime GetExitCodeProcess FindFirstFileA FindNextFileA FindClose GetFileSize ReadFile SetLastError RemoveDirectoryA CreateEventA CreateThread SetEvent SetEnvironmentVariableA CompareStringW CompareStringA GetLocaleInfoA FileTimeToLocalFileTime CloseHandle GetFileInformationByHandle WaitForSingleObject CreateFileA GetStringTypeW GetStringTypeA SetEndOfFile HeapFree HeapAlloc MultiByteToWideChar WideCharToMultiByte GetConsoleCP GetConsoleMode SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA RaiseException RtlUnwind HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetStdHandle GetFileType SetHandleCount GetStdHandle GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep WriteConsoleA GetConsoleOutputCP WriteConsoleW GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSection FlushFileBuffers

user32

SetWindowTextA SetDlgItemTextA LoadStringA EndDialog GetDlgItem DialogBoxParamA SendMessageA LoadImageA

gdi32

CreateFontIndirectA GetObjectA CreateSolidBrush DeleteObject

shell32

SHCreateDirectoryExA

shlwapi

PathRemoveFileSpecA PathFindFileNameA PathAddBackslashA PathAppendA PathRelativePathToA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_a826a8b426d9adfac925bab6cfdbf253_amadey_elex_smoke-loader_stop

kernel32

user32

gdi32

shell32

shlwapi

generic