2026-09-24_714214a91ec64880cbd95b9f6df9550e_amadey_elex_smoke-loader_stealc

General

Target
2026-09-24_714214a91ec64880cbd95b9f6df9550e_amadey_elex_smoke-loader_stealc
Size 307KB
Sample260925-h6tyka115r
SHA256 76338dead9936e4ea4abd35bc9b2bb435aa6a1eb56ed1359c995835447db57f1
MD5 714214a91ec64880cbd95b9f6df9550e
SHA1 8cd42aaf63905e8d93c283b04caa4f2d63bc2639
SHA512 127675a538b5c9e3f0ff10d5144eca922cbb97a994936d1ab2b62022f8556ae750c523a1f9cda01e5416282eb1bbf2457edaf7cc4939631251e14a4ac3469fcd
SSDEEP 6144:mmPrqhYZ0JaHjUjQDb9vRiNg40l407YWUj4Q3ok5oIdOpaHMpQN1+VRc:nPmheqaHjUcvmgjqWc4wHRdOpnp5Va
TLSH
T1B364CF90338CCEB6F11A15741095DE310D757CB83ABF80BBEFC5AD9A8A65AC05274B87
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_714214a91ec64880cbd95b9f6df9550e_amadey_elex_smoke-loader_stealc

File Explorer

2026-09-24_714214a91ec64880cbd95b9f6df9550e_amadey_elex_smoke-loader_stealc

.exe 307KB

2026-09-24_714214a91ec64880cbd95b9f6df9550e_amadey_elex_smoke-loader_stealc

IMPHASH d70623875852f1f74bba8919c9a63bc2
SHA256 76338dead9936e4ea4abd35bc9b2bb435aa6a1eb56ed1359c995835447db57f1
MD5 714214a91ec64880cbd95b9f6df9550e
SHA1 8cd42aaf63905e8d93c283b04caa4f2d63bc2639
SHA512 127675a538b5c9e3f0ff10d5144eca922cbb97a994936d1ab2b62022f8556ae750c523a1f9cda01e5416282eb1bbf2457edaf7cc4939631251e14a4ac3469fcd
SSDEEP 6144:mmPrqhYZ0JaHjUjQDb9vRiNg40l407YWUj4Q3ok5oIdOpaHMpQN1+VRc:nPmheqaHjUcvmgjqWc4wHRdOpnp5Va
TLSH
T1B364CF90338CCEB6F11A15741095DE310D757CB83ABF80BBEFC5AD9A8A65AC05274B87
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

48385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetCapture CreateDialogIndirectParamW RegisterClassExW ReleaseCapture FindWindowW CreateAcceleratorTableW IsWindowUnicode DragDetect GetCursorInfo CreateAcceleratorTableA CreateIconFromResourceEx AdjustWindowRect wvsprintfA CharNextW AppendMenuW RegisterWindowMessageW ShowCursor IsWindow DestroyCursor CreateCursor ScrollWindow SetScrollInfo InsertMenuItemW LoadStringW SetMenuItemInfoW DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageA GetMessageW EndDeferWindowPos DeferWindowPos BeginDeferWindowPos GetMonitorInfoW SetForegroundWindow SetWindowPlacement CheckMenuRadioItem EnableMenuItem CheckMenuItem DestroyAcceleratorTable GetSubMenu GetMenuItemID ModifyMenuW DialogBoxIndirectParamW DialogBoxParamW RemoveMenu LoadIconW DestroyIcon mouse_event GetDesktopWindow GetDCEx WindowFromPoint PtInRect LockWindowUpdate SetDlgItemInt MapWindowPoints GetKeyState TrackPopupMenu GetWindowTextW MessageBoxA SetCapture GetActiveWindow IsChild GetDlgCtrlID RedrawWindow GetCursorPos SetWindowsHookExW UnhookWindowsHookEx SetParent SetWindowTextW LoadBitmapW CallNextHookEx CreatePopupMenu CreateMenu InsertMenuW DestroyMenu CallWindowProcA CharUpperW CharLowerW DrawIcon EndDialog ScreenToClient GetDlgItemTextW SetDlgItemTextW GetDlgItemInt CreateDialogParamW DrawFocusRect FillRect FrameRect SetWindowLongW GetWindowLongW GetSysColor GetClassNameW PostQuitMessage LoadMenuW InflateRect ClientToScreen CallWindowProcW IsWindowVisible GetWindowRect ShowWindow SetWindowPos SetClipboardViewer ChangeClipboardChain SendDlgItemMessageW IsClipboardFormatAvailable OpenClipboard GetClipboardData RegisterClipboardFormatW CloseClipboard MessageBoxW RegisterClassW BeginPaint EndPaint GetFocus PostMessageW LoadCursorW SetCursor DestroyWindow CreateCaret DestroyCaret GetSystemMetrics GetWindowPlacement CreateWindowExW GetScrollPos GetScrollRange UpdateWindow DefWindowProcW DrawFrameControl GetMenu ShowCaret MessageBeep DrawTextW SetCaretPos HideCaret GetParent ShowScrollBar SetScrollRange InvalidateRect SetScrollPos GetKeyboardState ToAscii wsprintfW GetDC DrawEdge DrawTextExW ReleaseDC GetClientRect MoveWindow SetFocus LoadImageW DrawIconEx GetDlgItem SendMessageW EnableWindow SystemParametersInfoW SetMenu IsDialogMessageW IsDialogMessageA PeekMessageW IsZoomed DeleteMenu RealChildWindowFromPoint IsIconic DrawMenuBar GetMenuItemCount GetMenuStringW EmptyClipboard SetClipboardData GetMenuState SetWindowLongA MonitorFromWindow

kernel32

InterlockedDecrement InterlockedIncrement DecodePointer EncodePointer GetStartupInfoW HeapSetInformation MoveFileA HeapValidate EnumSystemCodePagesA VerLanguageNameW InitializeCriticalSectionAndSpinCount lstrcmpA FindResourceExA GetProfileSectionW ReleaseSemaphore GlobalAlloc Sleep ReleaseMutex WaitForSingleObject CreateDirectoryW GlobalSize CreateThread CreateMutexW FindClose FindNextFileW FindFirstFileW TerminateThread CopyFileW lstrcpynW GetSystemInfo GetVersionExW ExpandEnvironmentStringsW GetTimeFormatW GetDateFormatW GetLocalTime MulDiv GetACP SizeofResource LockResource LoadResource FindResourceW LocalLock LocalAlloc GetTempPathW SetLastError GetCommandLineW VirtualFree HeapCreate HeapDestroy LoadLibraryA LocalUnlock FlushFileBuffers GetConsoleMode GetConsoleCP GetModuleFileNameA WriteFile GetDateFormatA GetTimeFormatA GetCurrentDirectoryA GetFileType GetStdHandle SetHandleCount SetFilePointer GetTimeZoneInformation IsValidCodePage GetOEMCP TlsFree TlsSetValue TlsAlloc TlsGetValue GetStringTypeW GetStringTypeA GetCPInfo LCMapStringW LCMapStringA GetStartupInfoA GetProcessHeap HeapAlloc GetVersionExA GetCommandLineA HeapFree ExitProcess GetModuleHandleA GetSystemTimeAsFileTime GetDriveTypeW FileTimeToLocalFileTime FileTimeToSystemTime ReadFile IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess RaiseException RtlUnwind LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection LocalFree LoadLibraryW GetProcAddress CreateFileW GetCurrentProcessId GetCurrentProcess CloseHandle GlobalFree FreeLibrary GetCurrentDirectoryW SetCurrentDirectoryW GetModuleHandleW GetCurrentThreadId GetLastError GlobalLock GlobalUnlock GetFileAttributesW SetFileAttributesW MoveFileW GetFullPathNameW GetLongPathNameW lstrcmpiW DeleteFileW lstrcpyW lstrlenW GetModuleFileNameW lstrcatW lstrcmpW MultiByteToWideChar WideCharToMultiByte VirtualAlloc HeapReAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetStdHandle GetLocaleInfoW SetEnvironmentVariableA WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEndOfFile GetDriveTypeA CompareStringA CompareStringW HeapSize IsProcessorFeaturePresent

Name

.text

Size

72KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.code

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.BSS

Size

6KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ordata

Size

94KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ylaeais

Size

8KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_714214a91ec64880cbd95b9f6df9550e_amadey_elex_smoke-loader_stealc

user32

kernel32

generic