General
- Target 2026-10-11_497b7a7890e9e9a91c438adebec8883d_amadey_dharma_elex_icedid_smoke-loader_stop
- Size 1.7MB
- Sample261012-2gexws11dw
- SHA256 2ff141e1d055de7ec740902ca152ca59f7c49924f0b2833ae4cba4e0e6b0f6f4
- MD5 497b7a7890e9e9a91c438adebec8883d
- SHA1 681d994bf84aa2339667bcaaf41c99e2cc4918b0
- SHA512 90bd3b390589887ffbcd40d6f0aed2751e07047e728ac1f54fbd738eca18c3654d57d1bc96de0f31c6808239698845f9b018a89b981af8ec9296c1c56bd2e41b
- SSDEEP 24576:mHnmlJblvSdFP8THlhqe1kh4eOUvAK6kMU0MG0aw/FODVQLeBtaZMbPS8BehyDlr:4mHz0I8AK6kMfSibPrecW
- TLSH T116858DB07162A039E9BB10BB277E9458940DE9C05BD421C725D53AFFD61A4F02CBF2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_497b7a7890e9e9a91c438adebec8883d_amadey_dharma_elex_icedid_smoke-loader_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_497b7a7890e9e9a91c438adebec8883d_amadey_dharma_elex_icedid_smoke-loader_stop
- Size 1.7MB
- SHA256 2ff141e1d055de7ec740902ca152ca59f7c49924f0b2833ae4cba4e0e6b0f6f4
- MD5 497b7a7890e9e9a91c438adebec8883d
- SHA1 681d994bf84aa2339667bcaaf41c99e2cc4918b0
- SHA512 90bd3b390589887ffbcd40d6f0aed2751e07047e728ac1f54fbd738eca18c3654d57d1bc96de0f31c6808239698845f9b018a89b981af8ec9296c1c56bd2e41b
- SSDEEP 24576:mHnmlJblvSdFP8THlhqe1kh4eOUvAK6kMU0MG0aw/FODVQLeBtaZMbPS8BehyDlr:4mHz0I8AK6kMfSibPrecW
- TLSH T116858DB07162A039E9BB10BB277E9458940DE9C05BD421C725D53AFFD61A4F02CBF2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Server Software Component: Terminal Services DLL
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext