2026-09-30_5cc8ba331d7c39907525649c122e1b14_amadey_elex_emotet_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-30_5cc8ba331d7c39907525649c122e1b14_amadey_elex_emotet_smoke-loader_stop
Size 768KB
Sample261001-q3ecpsyerb
SHA256 14b7b74df276bea9152c462d604877b3e57404ec6b347fa0533e55cd67253154
MD5 5cc8ba331d7c39907525649c122e1b14
SHA1 349f58e179f91b429941e664f1667e844797e4ef
SHA512 19e6d72e6d51af918772016706d1b8ab936547d6351cd82d667009e7e7fb93126451f2e9522727a08437f70190d87e3213c0a2f9cbadc7226182860f3e9ccba0
SSDEEP 12288:ctGDmh9YDc5wDlFTUdCRPwBINre27PXgiyBq9s6+eaZrraZtbtaT5Qb0ng+/:ctGXDBJFTUIR4qPXgiyd6+eaAfbtawQt
TLSH
T14FF4BE11B3E2C0B2C5B61531066393B96232BF265B325AD7BBE43F0D6E74AE15E35321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_5cc8ba331d7c39907525649c122e1b14_amadey_elex_emotet_smoke-loader_stop

File Explorer

2026-09-30_5cc8ba331d7c39907525649c122e1b14_amadey_elex_emotet_smoke-loader_stop

.exe 768KB

2026-09-30_5cc8ba331d7c39907525649c122e1b14_amadey_elex_emotet_smoke-loader_stop

IMPHASH a70023a3b521b8e0fd38ec81241a04ec
SHA256 14b7b74df276bea9152c462d604877b3e57404ec6b347fa0533e55cd67253154
MD5 5cc8ba331d7c39907525649c122e1b14
SHA1 349f58e179f91b429941e664f1667e844797e4ef
SHA512 19e6d72e6d51af918772016706d1b8ab936547d6351cd82d667009e7e7fb93126451f2e9522727a08437f70190d87e3213c0a2f9cbadc7226182860f3e9ccba0
SSDEEP 12288:ctGDmh9YDc5wDlFTUdCRPwBINre27PXgiyBq9s6+eaZrraZtbtaT5Qb0ng+/:ctGXDBJFTUIR4qPXgiyd6+eaAfbtawQt
TLSH
T14FF4BE11B3E2C0B2C5B61531066393B96232BF265B325AD7BBE43F0D6E74AE15E35321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

341439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\work\svn\private\vc_software\AjMp3Tools\run\AjMp3Tools.pdb

msc

ord2 ord33 ord1 ord31 ord32 ord30

kernel32

GetFileAttributesW GetFileTime HeapFree HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread CreateThread HeapReAlloc ReadConsoleInputA SetConsoleMode GetConsoleMode GetSystemTimeAsFileTime RtlUnwind RaiseException ExitProcess HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetConsoleCP CreateFileA GetTimeZoneInformation SetStdHandle GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA GetStringTypeA GetStringTypeW GetCurrentDirectoryA GetDriveTypeA SetEnvironmentVariableA SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags FormatMessageW GetVersionExW CreateFileW GetFullPathNameW GetVolumeInformationW GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA MulDiv GetModuleHandleA FileTimeToLocalFileTime FileTimeToSystemTime FindNextFileW GetCurrentProcessId SetLastError GlobalAddAtomW CloseHandle GlobalUnlock WritePrivateProfileStringW FreeResource GlobalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryW CompareStringA InterlockedExchange GlobalLock lstrcmpW GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleW GetProcAddress LocalFree GetLastError GetModuleFileNameW DeleteFileA MultiByteToWideChar GetTickCount lstrlenA DeleteFileW FindClose FindFirstFileW WideCharToMultiByte lstrlenW Sleep FindResourceW LoadResource LockResource SizeofResource InterlockedDecrement InterlockedIncrement GetEnvironmentStrings

user32

RegisterClipboardFormatW PostThreadMessageW ReleaseCapture LoadCursorW SetCapture CharUpperW RegisterWindowMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetForegroundWindow GetTopWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu GetSubMenu UnregisterClassA GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect PtInRect DefWindowProcW CallWindowProcW OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW TabbedTextOutW GetSysColor DestroyMenu CopyRect UnhookWindowsHookEx GetWindowTextLengthW GetWindowTextW SetFocus MoveWindow SetWindowLongW GetDlgCtrlID SetWindowTextW IsDialogMessageW SendDlgItemMessageW GetWindowThreadProcessId GetLastActivePopup MessageBoxW SetCursor SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW IsWindowVisible PeekMessageW ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW UnregisterClassW GetSysColorBrush MessageBeep GetFocus ModifyMenuW GetNextDlgGroupItem InvalidateRgn InvalidateRect SetRect IsRectEmpty CopyAcceleratorTableW GetMenuState EnableMenuItem CheckMenuItem GetKeyState GetCursorPos WindowFromPoint ScreenToClient GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow IsWindow GetWindowLongW GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog GetWindow SetWindowContextHelpId GetParent MapDialogRect SetWindowPos PostQuitMessage ShowWindow EnableWindow PostMessageW SendMessageW DrawIcon GetClientRect GetSystemMetrics IsIconic AppendMenuW GetSystemMenu LoadIconW DrawTextExW CharNextW DrawTextW GetMenuItemID

gdi32

ExtSelectClipRgn DeleteDC GetStockObject SetViewportOrgEx GetDeviceCaps CreateRectRgnIndirect GetBkColor GetTextColor GetRgnBox GetMapMode SelectObject Escape TextOutW RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx GetObjectW CreateBitmap GetWindowExtEx GetViewportExtEx DeleteObject GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC ExtTextOutW OffsetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegEnumKeyW RegQueryValueW RegQueryValueExW RegCreateKeyExW RegOpenKeyW RegOpenKeyExW RegDeleteKeyW RegCloseKey RegSetValueExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteW SHGetSpecialFolderPathW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW PathStripToRootW PathIsUNCW PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc CoGetClassObject CoTaskMemFree CLSIDFromString CLSIDFromProgID StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter

oleaut32

VariantCopy SafeArrayDestroy SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SysAllocStringLen VariantInit VariantChangeType VariantClear SysFreeString SysAllocString SysAllocStringByteLen SysStringLen

ajnetsdkdll

AJ_NETSDK_IPC_StartAudioCapture AJ_NETSDK_IPC_StopAudioCapture

sensapi

IsNetworkAlive

wininet

InternetCheckConnectionW InternetGetConnectedState

winmm

timeKillEvent

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_5cc8ba331d7c39907525649c122e1b14_amadey_elex_emotet_smoke-loader_stop

msc

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ajnetsdkdll

sensapi

wininet

winmm

generic