2026-10-02_2ddb56a89ac73434a86ea21a682f54fb_elex_emotet_pngdowner_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_2ddb56a89ac73434a86ea21a682f54fb_elex_emotet_pngdowner_smoke-loader_stop
Size 160KB
Sample261003-sm4nrss1bv
SHA256 970a15d7ada91ff9e6022ae19e4dfe352663e84cad6fd3f5097136b20a514086
MD5 2ddb56a89ac73434a86ea21a682f54fb
SHA1 904435b8c89823b45d66f21bbf718717c67ce4ae
SHA512 8f717b0f36f2ea359e33ad88c5860264eca844dafe918bfdf781d320e3a0ccd33067f06b0a01e714bf2a38e4e34336c346e236188cf60f421646f5325a36dbba
SSDEEP 3072:WB0jFIoxKx9Upzcdx9peGigJ6GueChp5+BaLta:WCjk3UpzMbpeXg0XeChD+/
TLSH
T15AF38E2236E2C0B3D56B007A4CC9C779B7B2F9709F3646837BD51B4E5E355A28B2A341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_2ddb56a89ac73434a86ea21a682f54fb_elex_emotet_pngdowner_smoke-loader_stop

File Explorer

2026-10-02_2ddb56a89ac73434a86ea21a682f54fb_elex_emotet_pngdowner_smoke-loader_stop

.exe 160KB

2026-10-02_2ddb56a89ac73434a86ea21a682f54fb_elex_emotet_pngdowner_smoke-loader_stop

IMPHASH 046f3c2ddb78be60ff5966bbc8c5521d
SHA256 970a15d7ada91ff9e6022ae19e4dfe352663e84cad6fd3f5097136b20a514086
MD5 2ddb56a89ac73434a86ea21a682f54fb
SHA1 904435b8c89823b45d66f21bbf718717c67ce4ae
SHA512 8f717b0f36f2ea359e33ad88c5860264eca844dafe918bfdf781d320e3a0ccd33067f06b0a01e714bf2a38e4e34336c346e236188cf60f421646f5325a36dbba
SSDEEP 3072:WB0jFIoxKx9Upzcdx9peGigJ6GueChp5+BaLta:WCjk3UpzMbpeXg0XeChD+/
TLSH
T15AF38E2236E2C0B3D56B007A4CC9C779B7B2F9709F3646837BD51B4E5E355A28B2A341
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

49487

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersionExA lstrcmpW GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GetLocaleInfoA GetCPInfo GetOEMCP ReadFile SetFilePointer FlushFileBuffers SetEndOfFile GetCurrentProcess GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc VirtualAlloc RtlUnwind GetCommandLineA GetProcessHeap RaiseException HeapSize ExitProcess VirtualFree HeapDestroy HeapCreate GetStdHandle TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP SetStdHandle GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW GetThreadLocale GlobalGetAtomNameA GlobalFlags lstrcmpA GetCurrentThreadId InterlockedIncrement FreeLibrary InterlockedDecrement GetModuleHandleA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentProcessId GetModuleFileNameA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree FindResourceA LoadResource LockResource SizeofResource SetLastError lstrlenA CompareStringA GetTempPathA WinExec DeleteFileA CreateFileA Sleep WriteFile CloseHandle LoadLibraryA GetProcAddress GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar InterlockedExchange

user32

GrayStringA PostQuitMessage RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu PostMessageA DrawTextExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA SetWindowLongA SystemParametersInfoA IsIconic GetWindowPlacement SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem GetFocus ClientToScreen GetWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect GetWindowTextA SetWindowTextA UnregisterClassA SetWindowsHookExA CallNextHookEx wsprintfA DispatchMessageA GetKeyState PeekMessageA ValidateRect LoadCursorA GetSystemMetrics GetDC ReleaseDC DrawTextA TabbedTextOutA DestroyMenu CreateWindowExA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState MessageBoxA EnableWindow IsWindowEnabled GetLastActivePopup GetSysColor GetSysColorBrush UnhookWindowsHookEx GetWindowThreadProcessId SendMessageA GetParent GetWindowLongA SetWindowPos

wininet

InternetCloseHandle InternetReadFile HttpQueryInfoA HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA InternetOpenUrlA

oleacc

CreateStdAccessibleObject LresultFromObject

gdi32

RectVisible DeleteDC GetStockObject DeleteObject CreateBitmap GetClipBox SetTextColor SetBkColor ExtTextOutA SaveDC RestoreDC SetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape GetDeviceCaps PtVisible TextOutA

winspool.drv

ClosePrinter OpenPrinterA DocumentPropertiesA

oleaut32

VariantClear VariantChangeType VariantInit GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_2ddb56a89ac73434a86ea21a682f54fb_elex_emotet_pngdowner_smoke-loader_stop

kernel32

user32

wininet

oleacc

gdi32

winspool.drv

oleaut32

generic