2026-09-29_92a8910ca7ac733b8e02d67e1d9ed799_amadey_elex_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_92a8910ca7ac733b8e02d67e1d9ed799_amadey_elex_smoke-loader_stop
Size 2.6MB
Sample260930-w5drvaydlc
SHA256 f1548604cc19a24c8e029b45ad1fd3e4075b4fc4f8bf20121d5f7ae7913d6d31
MD5 92a8910ca7ac733b8e02d67e1d9ed799
SHA1 1cd00b8a3aebaf8cc672d2a259b3ef2b633e8da0
SHA512 525e254d17ac7db3845ba18287c31819ec669c2e80cd2ba3830f6c6a2a60bdf82cf7abc0a8a42ecd5e3c90cf9cabe81bb448e6e4244d0f13252a2798ed2171b1
SSDEEP 49152:yWBIcSnK9FfiycH8XzBb4F643YHebW2IEUSD0QVFSs+WKQvGXj+JVjMX3XK2ZwSG:dIc99Ffi3MaVieaUDBLlXcXj+PWKsXn2
TLSH
T1E8D523707A838276F4A31535DDF582F90A7DB8A22F3561CFA7C44B5D1E226E18A34372
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_92a8910ca7ac733b8e02d67e1d9ed799_amadey_elex_smoke-loader_stop

File Explorer

2026-09-29_92a8910ca7ac733b8e02d67e1d9ed799_amadey_elex_smoke-loader_stop

.exe 2.6MB

2026-09-29_92a8910ca7ac733b8e02d67e1d9ed799_amadey_elex_smoke-loader_stop

IMPHASH c37a0cf32fb77a9ca8948933d9037856
SHA256 f1548604cc19a24c8e029b45ad1fd3e4075b4fc4f8bf20121d5f7ae7913d6d31
MD5 92a8910ca7ac733b8e02d67e1d9ed799
SHA1 1cd00b8a3aebaf8cc672d2a259b3ef2b633e8da0
SHA512 525e254d17ac7db3845ba18287c31819ec669c2e80cd2ba3830f6c6a2a60bdf82cf7abc0a8a42ecd5e3c90cf9cabe81bb448e6e4244d0f13252a2798ed2171b1
SSDEEP 49152:yWBIcSnK9FfiycH8XzBb4F643YHebW2IEUSD0QVFSs+WKQvGXj+JVjMX3XK2ZwSG:dIc99Ffi3MaVieaUDBLlXcXj+PWKsXn2
TLSH
T1E8D523707A838276F4A31535DDF582F90A7DB8A22F3561CFA7C44B5D1E226E18A34372
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

83871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW SHGetMalloc

user32

RegisterClassW DefWindowProcW GetWindowWord SetWindowWord BeginPaint GetSysColor GetClientRect SetRect EndPaint LoadCursorW ShowWindow GetLastActivePopup PostMessageW EnableWindow SendMessageW GetTopWindow SetWindowLongW GetWindowLongW SetForegroundWindow DialogBoxParamW SetDlgItemTextW EndDialog GetWindowRect GetSystemMetrics SetWindowPos OemToCharA SetTimer GetMessageW PostQuitMessage KillTimer LoadIconW PeekMessageW TranslateMessage DispatchMessageW SetCursor GetParent SendDlgItemMessageW GetDlgItem InvalidateRect UpdateWindow MessageBoxW SetWindowTextW GetDlgItemTextW SetActiveWindow LoadStringW

kernel32

LCMapStringW LCMapStringA HeapReAlloc HeapSize IsValidCodePage GetOEMCP GetACP GetCPInfo SetEndOfFile GetConsoleMode GetConsoleCP FindClose FindFirstFileW SetCurrentDirectoryW LocalFileTimeToFileTime DosDateTimeToFileTime LocalAlloc GetVolumeInformationW CreateDirectoryW DeleteFileW LoadLibraryA RemoveDirectoryW CloseHandle CreateFileW GlobalFree GlobalUnlock GlobalHandle GlobalLock GlobalAlloc GetModuleFileNameW GlobalMemoryStatus GetVersion GetVersionExW WriteFile GetSystemTime CreateProcessW LocalFree FormatMessageW GetLastError ExitProcess MoveFileExW FindNextFileW GetTickCount WaitForSingleObject SetErrorMode CreateFileA ReadFile SetFilePointer InitializeCriticalSection WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFileAttributesW FlushFileBuffers SetFileTime Sleep LeaveCriticalSection EnterCriticalSection SetStdHandle GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter VirtualAlloc VirtualFree FileTimeToSystemTime FileTimeToLocalFileTime GetFullPathNameW GetLocalTime GetProcAddress GetWindowsDirectoryW GetEnvironmentVariableW GetModuleHandleA MultiByteToWideChar WideCharToMultiByte GetDriveTypeW HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind GetFileType TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate

gdi32

SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32W ExtTextOutW CreateDCW GetDeviceCaps CreateFontIndirectW DeleteDC SelectObject DeleteObject SetBkColor

comctl32

ord17

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_92a8910ca7ac733b8e02d67e1d9ed799_amadey_elex_smoke-loader_stop

shell32

user32

kernel32

gdi32

comctl32

generic