2026-10-10_87120af264b5363ee4351cc9f42c8a69_amadey_elex_emotet_remcos_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-10_87120af264b5363ee4351cc9f42c8a69_amadey_elex_emotet_remcos_smoke-loader_stop
Size 344KB
Sample261011-la8cvsfc39
SHA256 fdc0acb2f8b2d12c25deabb08932de1c87cb7281452f2616029cb8d1f9a19c40
MD5 87120af264b5363ee4351cc9f42c8a69
SHA1 501cf02730b9f8c468edeaebb9dcac37ff9ed002
SHA512 dd5f37b8816aa466e1e42ebb68c73376c47471a0d0baae9a659c0945efa7fb8a5f6bcba491114db79a030046a540722ab0ad86e55e690746cf816993675c42ad
SSDEEP 6144:j3Z5G5vOnD0lJ3sYcIDBhOgbObTe5htnRPC:j3VnD09cIDBkgSbwfA
TLSH
T1EE747C1177D5D03AD2A312738EA3C76DA6BABD504F254687B7C13B1FAE302D29A39701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_87120af264b5363ee4351cc9f42c8a69_amadey_elex_emotet_remcos_smoke-loader_stop

File Explorer

2026-10-10_87120af264b5363ee4351cc9f42c8a69_amadey_elex_emotet_remcos_smoke-loader_stop

.exe 344KB

2026-10-10_87120af264b5363ee4351cc9f42c8a69_amadey_elex_emotet_remcos_smoke-loader_stop

IMPHASH 966dcc2e44d8795d44a4e1685fec5c91
SHA256 fdc0acb2f8b2d12c25deabb08932de1c87cb7281452f2616029cb8d1f9a19c40
MD5 87120af264b5363ee4351cc9f42c8a69
SHA1 501cf02730b9f8c468edeaebb9dcac37ff9ed002
SHA512 dd5f37b8816aa466e1e42ebb68c73376c47471a0d0baae9a659c0945efa7fb8a5f6bcba491114db79a030046a540722ab0ad86e55e690746cf816993675c42ad
SSDEEP 6144:j3Z5G5vOnD0lJ3sYcIDBhOgbObTe5htnRPC:j3VnD09cIDBkgSbwfA
TLSH
T1EE747C1177D5D03AD2A312738EA3C76DA6BABD504F254687B7C13B1FAE302D29A39701
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

145719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\data\workdir\project\bluestone\bluestone_ecu\trunk\tools\ecuctrl_zk\release\SWDemo.pdb

kernel32

GetFileAttributesW GetFileTime GetTickCount HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA FileTimeToLocalFileTime HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA SetErrorMode GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer FileTimeToSystemTime GetThreadLocale lstrlenA InterlockedIncrement GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc WritePrivateProfileStringW GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryExW CompareStringA InterlockedExchange InterlockedDecrement GlobalFree GlobalAlloc FormatMessageW LocalFree WideCharToMultiByte GetCurrentProcessId GetModuleFileNameW lstrlenW GlobalLock GlobalUnlock MulDiv GetModuleHandleA FreeResource GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom LoadLibraryW FreeLibrary CompareStringW LoadLibraryA SetLastError lstrcmpW GetProcAddress GetVersionExA LockResource ReadFile SetCommState ClearCommError SizeofResource WriteFile GetCommState GetLastError Sleep WaitForSingleObject CreateSemaphoreW LoadResource GetModuleHandleW GetSystemDefaultLangID OpenThread CreateThread CloseHandle ReleaseSemaphore FindResourceW CreateEventW CreateFileW TerminateThread HeapDestroy MultiByteToWideChar

user32

GetNextDlgGroupItem MessageBeep RegisterClipboardFormatW PostThreadMessageW UnregisterClassW LoadCursorW GetSysColorBrush SetWindowContextHelpId MapDialogRect GetMessageW TranslateMessage GetCursorPos ValidateRect SetCursor PostQuitMessage DestroyMenu GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem GetWindowThreadProcessId IsWindowEnabled ShowWindow MoveWindow SetWindowTextW IsDialogMessageW InvalidateRgn EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW TabbedTextOutW RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW SetPropW GetPropW GetFocus IsWindow SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageW GetTopWindow DestroyWindow GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState SetForegroundWindow IsWindowVisible UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount MessageBoxW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx ScreenToClient EqualRect CopyRect PtInRect SetRect IsRectEmpty CopyAcceleratorTableW CharNextW CharUpperW GetDlgCtrlID DefWindowProcW ReleaseCapture SetCapture CallWindowProcW GetWindowLongW SetWindowLongW SetWindowPos OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement SetTimer LoadIconW PostMessageW KillTimer PostMessageA GetDlgItem IsIconic SetWindowsHookExW GetClassNameW GetSystemMetrics AppendMenuW UnhookWindowsHookEx CallNextHookEx DrawIcon GetSystemMenu GetWindow GetWindowRect GetParent SendMessageW ClipCursor GetSysColor FillRect DrawTextW GetClientRect InvalidateRect EnableWindow RemovePropW UnregisterClassA

gdi32

ExtSelectClipRgn DeleteDC CreateBitmap PtVisible GetStockObject GetDeviceCaps GetMapMode GetBkColor GetTextColor GetRgnBox GetWindowExtEx GetViewportExtEx ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW CreateRectRgnIndirect CreateSolidBrush DeleteObject MoveToEx LineTo SetMapMode SetBkMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox GetObjectW GetTextExtentPoint32W CreateCompatibleBitmap CreateCompatibleDC BitBlt CreateFontIndirectW RectVisible

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

RegEnumKeyW RegEnumValueW RegSetValueExW RegCreateKeyExW RegQueryValueW RegOpenKeyExW RegDeleteKeyW RegQueryValueExW RegOpenKeyW RegCloseKey

comctl32

_TrackMouseEvent InitCommonControlsEx

shlwapi

PathFindExtensionW PathStripToRootW PathFindFileNameW PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

SysAllocString OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantCopy SysFreeString SysStringLen SysAllocStringLen VariantInit VariantChangeType VariantClear

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_87120af264b5363ee4351cc9f42c8a69_amadey_elex_emotet_remcos_smoke-loader_stop

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic