2026-09-30_5fd2c68281c39864a77e84d0d150c4b3_amadey_elex_smoke-loader_stop

General

Target
2026-09-30_5fd2c68281c39864a77e84d0d150c4b3_amadey_elex_smoke-loader_stop
Size 307KB
Sample260930-m6vbjszs8l
SHA256 c898b0799176d5fda33c437b3cacd44931b3a5f8bb3b7a423299b2d124516d53
MD5 5fd2c68281c39864a77e84d0d150c4b3
SHA1 6e4066121ae7e029a8e55b0d613cafa790ab8a72
SHA512 fe632c041c6fa69d4364a20d0134de61876d7bdaa76d46791d46e471844d95590bb726f049847e14a48ed1fac3727a884ab34a635662521b68f5de9273ca1b79
SSDEEP 6144:2Ns4F9jq/iZZLNQMG7MphmBsD3qOZGQb+BUjDfYgFcKo:2Njq/iZpWRophmBdOZXb+ujDfZFc
TLSH
T187648D10BB90C035E1F717F849BA93ADA93E7EA15B2460CB52D52BEE56346E0EC31317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_5fd2c68281c39864a77e84d0d150c4b3_amadey_elex_smoke-loader_stop

File Explorer

2026-09-30_5fd2c68281c39864a77e84d0d150c4b3_amadey_elex_smoke-loader_stop

.exe 307KB

2026-09-30_5fd2c68281c39864a77e84d0d150c4b3_amadey_elex_smoke-loader_stop

IMPHASH 2f129e2bd6f90680b3617141b4faf74c
SHA256 c898b0799176d5fda33c437b3cacd44931b3a5f8bb3b7a423299b2d124516d53
MD5 5fd2c68281c39864a77e84d0d150c4b3
SHA1 6e4066121ae7e029a8e55b0d613cafa790ab8a72
SHA512 fe632c041c6fa69d4364a20d0134de61876d7bdaa76d46791d46e471844d95590bb726f049847e14a48ed1fac3727a884ab34a635662521b68f5de9273ca1b79
SSDEEP 6144:2Ns4F9jq/iZZLNQMG7MphmBsD3qOZGQb+BUjDfYgFcKo:2Njq/iZpWRophmBdOZXb+ujDfZFc
TLSH
T187648D10BB90C035E1F717F849BA93ADA93E7EA15B2460CB52D52BEE56346E0EC31317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

54880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kahizalirodel\yomeb.pdb

kernel32

FileTimeToDosDateTime TerminateProcess ZombifyActCtx GetConsoleAliasesLengthW GetVersionExW GetConsoleOutputCP GetDefaultCommConfigA SetCommConfig GetDriveTypeW FreeEnvironmentStringsW CreateTimerQueue FindNextVolumeW InitializeCriticalSectionAndSpinCount ReadConsoleInputW TlsGetValue SetComputerNameExW FindAtomW BuildCommDCBAndTimeoutsW LoadLibraryA LocalAlloc InitializeCriticalSection GetCommandLineA InterlockedIncrement GetCalendarInfoA CopyFileA OutputDebugStringA GetSystemTimeAdjustment GetPriorityClass WritePrivateProfileStringA ExitThread GlobalWire HeapCompact GetStartupInfoW CreatePipe GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA WriteProfileSectionW GetCalendarInfoW IsDebuggerPresent SetConsoleCursorPosition GetLastError DebugActiveProcess lstrcmpW WriteFile GetNumberOfConsoleInputEvents GetSystemWindowsDirectoryW CopyFileW FindNextChangeNotification CreateActCtxA SetMailslotInfo GetPrivateProfileIntA _lread OutputDebugStringW InterlockedDecrement DefineDosDeviceA SetVolumeMountPointA EndUpdateResourceW WriteConsoleA VirtualProtect InterlockedPushEntrySList DeleteCriticalSection FileTimeToSystemTime GetVolumePathNameA GetConsoleMode HeapSetInformation FindActCtxSectionStringA WriteProcessMemory MoveFileExA GetProcAddress GlobalCompact UnregisterWait FormatMessageA FatalExit TransmitCommChar WaitNamedPipeW CreateIoCompletionPort FindResourceExA EnumDateFormatsA GetSystemInfo EnumCalendarInfoExW OpenSemaphoreA GetPrivateProfileStructA GetMailslotInfo lstrcpyA VerLanguageNameA SetThreadExecutionState GetSystemTime GetFileInformationByHandle GetConsoleCP GetConsoleAliasA SetConsoleScreenBufferSize CreateMailslotA EnumDateFormatsW GetCommState LockFile _lopen GetConsoleAliasExesLengthW GetWriteWatch CreateConsoleScreenBuffer ClearCommBreak ChangeTimerQueueTimer GetOverlappedResult WriteConsoleInputW GlobalDeleteAtom HeapSize GetConsoleWindow GetStringTypeA SetFilePointer PostQueuedCompletionStatus SetFileApisToANSI OpenWaitableTimerW GetProcessId PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointA WriteProfileStringA InitAtomTable GlobalAddAtomA WriteConsoleOutputCharacterW TerminateJobObject VirtualAlloc GetBinaryTypeW QueryDosDeviceW LeaveCriticalSection Sleep EnterCriticalSection RaiseException RtlUnwind MoveFileA HeapValidate IsBadReadPtr UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW GetCurrentProcess GetModuleHandleW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetACP GetOEMCP GetCPInfo IsValidCodePage ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapReAlloc FlushFileBuffers WideCharToMultiByte DebugBreak WriteConsoleW LoadLibraryW MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetLocaleInfoA SetStdHandle CloseHandle CreateFileA

user32

OemToCharA

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_5fd2c68281c39864a77e84d0d150c4b3_amadey_elex_smoke-loader_stop

kernel32

user32

msimg32

generic