2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play

General

Target
2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play
Size 1.5MB
Sample261022-ythb1atxdz
SHA256 844287807b4db03c5db77d6d4d0f8b00773f055bdcb89408c1d9d8ff27e7c3dc
MD5 7d99c9991e2d9486064fc2317d7bcc1d
SHA1 c170914e49b37fca2f8ede682a9d7d5a453361e3
SHA512 f3d7bd7adab3e182617de97a1a0e062f06a73983a305c8eb19f09cd3f2c766acc5ff8f4db6fda35909233361d532c65bfc7a9d9548b70b403de5f64ae4e974a8
SSDEEP 24576:paArVXsMvxub8IIR6i7KlaadbU0IOW0weCvx0ltZbfnQ/tbw/2Mkjy6Fr7g0oB:paC8GxubdNNVdb9IPKfQ/lFTjN4
TLSH
T197651212BAE8912AF1B38F3118745766B07B7CA0DF3A9B6E1B8021AD1D31550DE70B77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play

File Explorer

2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play

.exe 1.5MB

2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play

IMPHASH a4a50a9d79b56f2ce0bab4fe0cb0391c
SHA256 844287807b4db03c5db77d6d4d0f8b00773f055bdcb89408c1d9d8ff27e7c3dc
MD5 7d99c9991e2d9486064fc2317d7bcc1d
SHA1 c170914e49b37fca2f8ede682a9d7d5a453361e3
SHA512 f3d7bd7adab3e182617de97a1a0e062f06a73983a305c8eb19f09cd3f2c766acc5ff8f4db6fda35909233361d532c65bfc7a9d9548b70b403de5f64ae4e974a8
SSDEEP 24576:paArVXsMvxub8IIR6i7KlaadbU0IOW0weCvx0ltZbfnQ/tbw/2Mkjy6Fr7g0oB:paC8GxubdNNVdb9IPKfQ/lFTjN4
TLSH
T197651212BAE8912AF1B38F3118745766B07B7CA0DF3A9B6E1B8021AD1D31550DE70B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

31291

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AvastBrowserUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle GetFileType IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection CloseHandle SetEvent ResetEvent WaitForSingleObjectEx CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-21_7d99c9991e2d9486064fc2317d7bcc1d_amadey_elex_play

advapi32

kernel32

shell32

user32

shlwapi

generic