2026-10-02_63b7a5d1c0cfff9df50628763b9c9a92_amadey_elex_smoke-loader

General

Target
2026-10-02_63b7a5d1c0cfff9df50628763b9c9a92_amadey_elex_smoke-loader
Size 220KB
Sample261003-nf71dsch54
SHA256 e843320934db42d8391bee7ba9f5a9fe59e0a18d2ac9dc339a86f350215524f0
MD5 63b7a5d1c0cfff9df50628763b9c9a92
SHA1 e19eab27055be0fb57b9190e987417e012667a01
SHA512 a4051141342826438ed13f9665ba11b675e38065c6c5b4d32a5da6a9ef749616ac8b671a797a6e5640c44a22e229393c6c3647bd8ccd9ec50e8a810f7dfdf84a
SSDEEP 6144:oJ69/zQ0nR6xV2VALOZyehp8FHJHoeAPCFwYluKd:H9/88R6xV2VALOZyehp8lJHokFwxK
TLSH
T1D1248BB7E9C052B6CA87937781C6C722DF7381F507A141C3F78C1831AB266E15A7B259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_63b7a5d1c0cfff9df50628763b9c9a92_amadey_elex_smoke-loader

File Explorer

2026-10-02_63b7a5d1c0cfff9df50628763b9c9a92_amadey_elex_smoke-loader

.exe 220KB

2026-10-02_63b7a5d1c0cfff9df50628763b9c9a92_amadey_elex_smoke-loader

IMPHASH a748a7b40b99ec291d54c001001fb23e
SHA256 e843320934db42d8391bee7ba9f5a9fe59e0a18d2ac9dc339a86f350215524f0
MD5 63b7a5d1c0cfff9df50628763b9c9a92
SHA1 e19eab27055be0fb57b9190e987417e012667a01
SHA512 a4051141342826438ed13f9665ba11b675e38065c6c5b4d32a5da6a9ef749616ac8b671a797a6e5640c44a22e229393c6c3647bd8ccd9ec50e8a810f7dfdf84a
SSDEEP 6144:oJ69/zQ0nR6xV2VALOZyehp8FHJHoeAPCFwYluKd:H9/88R6xV2VALOZyehp8lJHokFwxK
TLSH
T1D1248BB7E9C052B6CA87937781C6C722DF7381F507A141C3F78C1831AB266E15A7B259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

111344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetDriveTypeA GetVolumeInformationA GetFullPathNameA GetLocaleInfoA GetConsoleScreenBufferInfo GetStdHandle ReadFile SetConsoleMode GetConsoleMode WideCharToMultiByte DosDateTimeToFileTime SetFileAttributesA GetFileAttributesA GetFileTime SetFileTime HeapFree HeapAlloc GetProcessHeap GetCurrentProcess InitializeCriticalSection ReleaseMutex WaitForSingleObject InterlockedExchange CreateMutexA lstrcpynA lstrcmpiA LeaveCriticalSection EnterCriticalSection lstrlenA CloseHandle SetFilePointer GetLastError SetEndOfFile FileTimeToLocalFileTime FileTimeToSystemTime GetLocalTime SystemTimeToFileTime LocalFileTimeToFileTime GetVersion FindClose FindNextFileA SetVolumeLabelA FindFirstFileA CreateDirectoryA DeleteFileA SetEnvironmentVariableW SetConsoleCtrlHandler ExitProcess GetProcAddress GetModuleHandleA TerminateProcess MoveFileA GetSystemTimeAsFileTime SetStdHandle GetFileType HeapReAlloc GetCommandLineA GetVersionExA GetACP GetOEMCP GetCPInfo WriteFile UnhandledExceptionFilter GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA MultiByteToWideChar GetStringTypeW HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStartupInfoA FlushFileBuffers LCMapStringA LCMapStringW GetTimeZoneInformation GetCurrentDirectoryA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW CompareStringA CompareStringW SetEnvironmentVariableA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId VirtualProtect GetSystemInfo VirtualQuery HeapSize LoadLibraryA RtlUnwind GetLocaleInfoW

advapi32

OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges GetKernelObjectSecurity SetKernelObjectSecurity IsValidSecurityDescriptor GetSecurityDescriptorDacl IsValidAcl GetSecurityDescriptorSacl GetSecurityDescriptorOwner IsValidSid GetSecurityDescriptorGroup GetSecurityDescriptorControl

user32

OemToCharA CharToOemA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_63b7a5d1c0cfff9df50628763b9c9a92_amadey_elex_smoke-loader

kernel32

advapi32

user32

generic